cisco-sa-dcnm-bypass-dyEejUMs: Cisco Data Center Network Manager Authentication Bypass Vulnerability
A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability exists because different installations share a static encryption key. An attacker could exploit this vulnerability by using the static key to craft a valid session token. A successful exploit could allow the attacker to perform arbitrary actions through the REST API with administrative privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-bypass-dyEejUMs
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-dcnm-bypass-dyEejUMs?
The cisco-sa-dcnm-bypass-dyEejUMs vulnerability has a critical severity rating due to the potential for unauthenticated remote access with administrative privileges.
How do I fix cisco-sa-dcnm-bypass-dyEejUMs?
To fix cisco-sa-dcnm-bypass-dyEejUMs, install the latest security patches provided by Cisco for the affected Cisco Data Center Network Manager software.
What systems are affected by cisco-sa-dcnm-bypass-dyEejUMs?
The cisco-sa-dcnm-bypass-dyEejUMs vulnerability affects Cisco Data Center Network Manager deployments with the vulnerable REST API.
Can cisco-sa-dcnm-bypass-dyEejUMs lead to data breaches?
Yes, cisco-sa-dcnm-bypass-dyEejUMs can potentially lead to data breaches, as it allows attackers to execute arbitrary actions with high-level privileges.
Is cisco-sa-dcnm-bypass-dyEejUMs actively being exploited?
There is currently no public information indicating that cisco-sa-dcnm-bypass-dyEejUMs is being actively exploited in the wild, but it remains critical to apply mitigations.