Unscored severity · published Nov 2, 2012
CVE-2012-5417
Cisco Prime Data Center Network Manager (DCNM) before 6.1(1) does not properly restrict access to certain JBoss MainDeployer functionality, which allows remote attackers to…
–
CVSS
3.1%
EPSS
No
On KEV
Description
Cisco Prime Data Center Network Manager (DCNM) before 6.1(1) does not properly restrict access to certain JBoss MainDeployer functionality, which allows remote attackers to execute arbitrary commands via JBoss Application Server Remote Method Invocation (RMI) services, aka Bug ID CSCtz44924.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PD
Prime Data Center Network Manager · Cisco
4.1(2); 4.1(3); 4.1(4); 4.1(5); 4.2(1); 4.2(3); +12 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5417
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5417
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121031-dcnm
www.securityfocus.com
http://www.securityfocus.com/bid/56348
www.securitytracker.com
http://www.securitytracker.com/id?1027712
More from Prime Data Center Network Manager
7.5
CVE-2015-0666
Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
9.8
CVE-2018-0258
A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote attacker to upload arbitrary files to any directory of a vulnerable…
9.8
CVE-2017-6640
A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the administrative console of a DCNM server…
9.8
CVE-2017-6639
A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to access…
8.1
CVE-2018-0464
A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to conduct directory traversal attacks and gain access to sensitive…