A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the administrative console of a DCNM server by using an account that has a default, static password. The account could be granted root- or system-level privileges. The vulnerability exists because the affected software has a default user account that has a default, static password. The user account is created automatically when the software is installed. An attacker could exploit this vulnerability by connecting remotely to an affected system and logging in to the affected software by using the credentials for this default user account. A successful exploit could allow the attacker to use this default user account to log in to the affected software and gain access to the administrative console of a DCNM server. This vulnerability affects Cisco Prime Data Center Network Manager (DCNM) Software releases prior to Release 10.2(1) for Microsoft Windows, Linux, and Virtual Appliance platforms. Cisco Bug IDs: CSCvd95346.

The Cisco Prime Data Center Network Manager (DCNM) running on the remote host is affected by an authentication bypass vulnerability due to the presence of a default user account with a static password that is not automatically removed post-installation. An unauthenticated, remote attacker can exploit this to login and gain root or system-level privileges.

According to its self-reported version number, the Cisco Prime Data Center Network Manager (DCNM) installed on the remote host is 10.1.x prior to 10.2.1. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in the     role-based access control (RBAC) functionality due to a     lack of authentication and authorization mechanisms for     a debugging tool. An unauthenticated, remote attacker     can exploit this to execute arbitrary code with root     privileges. (CVE-2017-6639)

  - A flaw exists due to the presence of a default user     account with a static password that is not automatically     removed post-installation. An unauthenticated, remote     attacker can exploit this to login and gain root or     system-level privileges. (CVE-2017-6640)

Note that this plugin determines if DCNM is vulnerable by checking the version number displayed in the web interface. However, the web interface is not available in older versions of DCNM.

According to its self-reported version number, the Cisco Prime Data Center Network Manager (DCNM) installed on the remote host is 10.1.x prior to 10.2.1. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in the     role-based access control (RBAC) functionality due to a     lack of authentication and authorization mechanisms for     a debugging tool. An unauthenticated, remote attacker     can exploit this to execute arbitrary code with root     privileges. (CVE-2017-6639)

  - A flaw exists due to the presence of a default user     account with a static password that is not automatically     removed post-installation. An unauthenticated, remote     attacker can exploit this to login and gain root or     system-level privileges. (CVE-2017-6640)

ID	Name	Product	Family	Severity
101357	Cisco Prime Data Center Network Manager Static Credential Authentication Bypass (cisco-sa-20170607-dcnm2)	Nessus	CISCO	critical
100993	Cisco Prime Data Center Network Manager 10.1.x < 10.2.1 Multiple Vulnerabilities (remote check)	Nessus	CISCO	critical
100843	Cisco Prime Data Center Network Manager 10.1.x < 10.2.1 Multiple Vulnerabilities	Nessus	CISCO	critical

Detections

Analytics

CVE-2017-6640

critical

Tenable Plugins

critical

critical

critical