A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote malicious user to bypass authentication and have direct unauthorized access to critical management functions. The vulnerability is due to an insecure default configuration of the affected system. An attacker could exploit this vulnerability by directly connecting to the exposed services. An exploit could allow the malicious user to retrieve and modify critical system files.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
cisco digital network architecture center 1.1 |
||
cisco digital network architecture center 1.1.1 |
||
cisco digital network architecture center 1.1.2 |
||
cisco digital network architecture center 1.1.3 |
Coding screwups for Prime Infrastructure and DNA Center admins to slurp up
Cisco admins, maybe you'd like to clear your Friday, because there's a fresh batch of critical-rated vulnerabilities to assess and patch as needed. The three worst bugs lie in Cisco's Prime Infrastructure and Digital Network Architecture (DNA) Center products, and are among 26 bugs disclosed this week. One of the critical-rated programming cockups is a permission error that can be exploited to perform arbitrary file upload. An attacker could send a file using TFTP, allowing the miscreant to run ...
Vulmon