Intrusion PreventionCisco.Prime.Data.Center.Network.Manager.Information.Disclosure
Description
This indicates an attack attempt against an Information Disclosure vulnerability in Cisco Prime Data Center Network Manager.
The vulnerability is due to improper validation of user supplied data when handling crafted HTTP Requests. A remote attacker can exploit this to disclose sensitive information from affected machines using malicious packets.
Affected Products
Cisco Systems Prime Data Center Network Manager (DCNM) prior to 7.1(1)
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems
Recommended Actions
Apply the most recent upgrade or patch from the vendor
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-dcnm
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 40436 |
| Created | May 05, 2015 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2015-0666 |
| Known Exploited | Yes |
| Exploit Prediction Score | 97.39% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Cisco |