VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Jul 31, 2020· Updated Jun 17, 2026

CVE-2020-3377

CVE-2020-3377

Description

A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to inject arbitrary commands on the affected device. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted arguments to a specific field within the application. A successful exploit could allow the attacker to run commands as the administrator on the DCNM.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Cisco Systems, Inc./Data Center Network Manager6 versions
    cpe:2.3:a:cisco:data_center_network_manager:11.0\(1\):*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:cisco:data_center_network_manager:11.0\(1\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:data_center_network_manager:11.1\(1\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:data_center_network_manager:11.2\(1\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:data_center_network_manager:11.3\(1\):*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: n/a
  • Cisco Systems, Inc./DCNMllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.