CVE-2015-0666 | Cisco Prime Data Center Network Manager (DCNM) - fmserver servlet Operational Intel

Executive Risk Summary

"A directory traversal vulnerability exists in the fmserver servlet of Cisco Prime Data Center Network Manager (DCNM) before 7.1(1), allowing remote attackers to read arbitrary files via a crafted pathname. This vulnerability can be exploited by an unauthenticated attacker, potentially leading to sensitive information disclosure."

Anticipated Attack Path

1. Initial Exploitation: Attacker crafts a malicious pathname to exploit the directory traversal vulnerability
2. Post-Exploitation: Attacker reads arbitrary files on the DCNM server, potentially gaining access to sensitive information
3. Lateral Movement: Attacker may use the obtained information to move laterally within the network

Am I Vulnerable?

Verify DCNM version and apply patch if necessary
Restrict access to the DCNM server and fmserver servlet
Monitor for suspicious activity and file access attempts

Operational Audit Arsenal

Target Type servlet

Target Asset fmserver

Standard Path /fmserver

Manual Verification Required

This is a non-Windows asset (Cisco). Use the target asset details and official path provided above to verify your current version against the official vendor advisories listed below.