ID:4768 - Exploit for Use of hard-coded credentials in Cisco Data Center Network Manager - CVE-2019-15977

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to gain full access to vulnerable system.

The vulnerability exists in the web-based management interface within the processing of web requests due to the presence of static credentials in "serverinfo" component. A remote unauthenticated attacker can access a specific section of the web interface and obtain certain confidential information from an affected device

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Remediation