CVE-2020-3376 HIGH

CVE-2020-3376: Cisco Data Center Network Manager Authentication Bypass Vulnerability

Vendor Cisco
Product Cisco Data Center Network Manager
Weakness CWE-306 · Missing auth
Published July 31, 2020
Last update November 13, 2024
View on NVD All CVEs

CVSS base score

7.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions on an affected device. The vulnerability is due to a failure in the software to perform proper authentication. An attacker could exploit this vulnerability by browsing to one of the hosted URLs in Cisco DCNM. A successful exploit could allow the attacker to interact with and use certain functions within the Cisco DCNM.

Key dates

02Disclosure timeline

July 31, 2020 CVE published
November 13, 2024 Record updated