ID:5780 - Exploit for Use of hard-coded credentials in Cisco Data Center Network Manager - CVE-2019-15977

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to gain full access to vulnerable system.

The vulnerability exists in the web-based management interface within the processing of web requests due to the presence of static credentials in the "JBoss_4_2Encrypter" component. A remote unauthenticated attacker can access a specific section of the web interface and obtain certain confidential information from an affected device

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Remediation