CVE-2017-12343
published 2017-11-30CVE-2017-12343: Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration…
PriorityP351high8.8CVSS 3.0
AVNACLPRLUINSUCHIHAH
EPSS
1.59%
73.0th percentile
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | data_center_network_manager | — | — |
| cisco | data_center_network_manager | — | — |
CVSS provenance
nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
vendor_cisco6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Multiple Vulnerabilities in Cisco Data Center Network Manager Software
vendor_cisco·2017-11-30·CVSS 6.1
CVE-2017-12343 [MEDIUM] CWE-113 Multiple Vulnerabilities in Cisco Data Center Network Manager Software
Multiple Vulnerabilities in Cisco Data Center Network Manager Software
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software.
For more information about these vulnerabilities, see the “Details” section of this security advisory.
There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-dcnm
Cisco
Multiple Vulnerabilities in Cisco Data Center Network Manager Software
vendor_cisco·CVSS 3.0
CVE-2017-12343 Multiple Vulnerabilities in Cisco Data Center Network Manager Software
CVE-2017-12343: Multiple Vulnerabilities in Cisco Data Center Network Manager Software
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software. For more information about these vulnerabilities, see the “
CVSS: 3.0
CWE: CWE-113, CWE-20, CWE-79, CWE-113, CWE-20, CWE-79
Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf40477, CSCvf63150
GHSA
GHSA-jrjr-mwx4-f9v2: Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM confi
ghsa_unreviewed·2022-05-13
CVE-2017-12343 [HIGH] CWE-79 GHSA-jrjr-mwx4-f9v2: Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM confi
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting (XSS) attack against a user of the affected software. Cisco Bug IDs: CSCvf40477, CSCvf63150, CSCvf68218, CSCvf68235, CSCvf68247.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2017-11-30
Published