Cisco.DCNM.SecurityManager.Authentication.Bypass
Description
This indicates an attack attempt to exploit an Authentication Bypass Vulnerability in Cisco Systems Data Center Network Manager.
The vulnerability is due to a hard-coded cryptographic key shared across installations. Successful exploitation of this vulnerability could allow the attacker to bypass authentication and perform arbitrary actions through the SOAP API with administrative privileges
Affected Products
Cisco Systems Data Center Network Manager prior to 11.3(1)
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-auth-bypass
Telemetry
Coverage
IPS (Regular DB) | |
IPS (Extended DB) |
Version Updates
Date | Version | Detail |
---|---|---|
2022-05-18 | 20.318 | Sig Added |
2020-05-05 | 15.835 | Default_action:pass:drop |
2020-02-07 | 15.774 |