ID:3508 - Exploit for Permissions, Privileges, and Access Controls in Cisco Data Center Network Manager - CVE-2019-1621

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to incorrect permissions settings on the affected software. A remote attacker can use a specific web servlet available on affected devices and request specific URLs to download arbitrary files from the underlying filesystem of the affected device.

Remediation