CVE-2019-1621

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to gain access to sensitive files on an affected device. The vulnerability is due to incorrect permissions settings on affected DCNM software. An attacker could exploit this vulnerability by connecting to the web-based management interface of an affected device and requesting specific URLs. A successful exploit could allow the attacker to download arbitrary files from the underlying filesystem of the affected device.

• CWE-264
• CWE-22

• http://packetstormsecurity.com/files/153546/Cisco-Data-Center-Network-Manager-11.1-1-Remote-Code-Execution.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Jul/7Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/108904Third Party Advisory, VDB Entry
• https://seclists.org/bugtraq/2019/Jul/11Mailing List, Third Party Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190626-dcnm-file-dwnldVendor Advisory
• http://packetstormsecurity.com/files/153546/Cisco-Data-Center-Network-Manager-11.1-1-Remote-Code-Execution.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Jul/7Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/108904Third Party Advisory, VDB Entry
• https://seclists.org/bugtraq/2019/Jul/11Mailing List, Third Party Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190626-dcnm-file-dwnldVendor Advisory

Published

Jun 27, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16204Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j …7.5
• CVE-2019-16205A vulnerability, in Brocade SANnav versions before v2.0, cou…8.8
• CVE-2019-16206The authentication mechanism, in Brocade SANnav versions bef…5.5
• CVE-2019-16207Brocade SANnav versions before v2.0 use a hard-coded passwor…7.8
• CVE-2019-16208Password-based encryption (PBE) algorithm, of Brocade SANnav…7.5
• CVE-2019-16209A vulnerability, in The ReportsTrustManager class of Brocade…7.4
• CVE-2019-16210Brocade SANnav versions before v2.0, logs plain text databas…5.5
• CVE-2019-16211Brocade SANnav versions before v2.1.0, contain a Plaintext P…9.8
• CVE-2019-16212A vulnerability in Brocade SANnav versions before v2.1.0 cou…8.8
• CVE-2019-16213Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 could allow a re…8.8
• CVE-2019-16214Libra Core before 2019-09-03 has an erroneous regular expres…5.7
• CVE-2019-16215The Markdown parser in Zulip server before 2.0.5 used a regu…6.5