CVE-2015-0666
7.5 · HIGH Actively ExploitedOverview
CVE-2015-0666 is a high-severity vulnerability affecting cisco prime_data_center_network_manager. It was published on April 3, 2015 and has a CVSS 3.1 base score of 7.5 (HIGH). This vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog, indicating active exploitation in the wild.
This vulnerability has a CVSS 3.1 base score of 7.5, rated HIGH. It can be exploited remotely over the network. No authentication or special privileges are required for exploitation.
Technical Description
Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.
Remediation
Check the references section for vendor advisories and patches from cisco. Update prime_data_center_network_manager to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
Affected Products
| Vendor | Product | Versions | Status |
|---|---|---|---|
| cisco | prime_data_center_network_manager | 0 | Affected |
References
Frequently Asked Questions
What is CVE-2015-0666?
CVE-2015-0666 is a high-severity vulnerability affecting cisco prime_data_center_network_manager. It was published on April 3, 2015 and has a CVSS 3.1 base score of 7.5 (HIGH). This vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog, indicating active exploitation in the wild.
How severe is CVE-2015-0666?
This vulnerability has a CVSS 3.1 base score of 7.5, rated HIGH. It can be exploited remotely over the network. No authentication or special privileges are required for exploitation.
How do I fix or remediate CVE-2015-0666?
Check the references section for vendor advisories and patches from cisco. Update prime_data_center_network_manager to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
How can CyberStrike help with CVE-2015-0666?
CyberStrike's AI-powered security agents can automatically detect CVE-2015-0666 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.
How CyberStrike Helps
AI agents map your attack surface to find vulnerabilities like this one.
Automated penetration testing that runs continuously, not just quarterly.
AI-driven PR review catches vulnerable dependencies before they ship.
Browser-based exploitation validates findings with real proof-of-concept.
Related HIGH CVEs from 2015
View all →Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before
Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x b
The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote att
Cross-site request forgery (CSRF) vulnerability in SearchBlox before 8.2 allows remote attackers to
Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a cr
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista
JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code
Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o
Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista S
The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS befo
Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause