CVE-2015-0666Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.

7.5 HIGHEPSS 40.37%⚡ Known Exploited (CISA KEV)NVD: Analyzed

Last updated: 2026-06-17 00:20 UTC

OverviewCVSS details

7.5HIGHCVSS 3.1

Score source: CISA-ADP
NVD status: Analyzed
Published: Apr 3, 2015
Assigner: cisco

Affected

prime data center network manager (cisco)

Versions: through 7.0(2) · 6.3(1)

All affected versions →

Exploitation

Public exploit: None listed
CISA KEV: Listed · Mar 25, 2022
KEV due date: Apr 15, 2022
Ransomware use: Unknown
SSVC: Exploitation active · Automatable yes · Impact partial

EPSS · FIRST, scored Nov 6

40.37%chance of exploitation in 30 days

Higher than 98.65% of CVEs

CVSS 3.1 · CISA-ADP

7.5High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack vector: Network
Attack complexity: Low
Privileges required: None
User interaction: None
Scope: Unchanged
Confidentiality impact: High
Integrity impact: None
Availability impact: None

CVSS 2.0 · NVD

7.8High

AV:N/AC:L/Au:N/C:C/I:N/A:N

Attack vector: Network
Attack complexity: Low
Authentication: None
Confidentiality impact: Complete
Integrity impact: None
Availability impact: None

NVD status: Analyzed

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
7.5	HIGH	3.1CISA-ADP	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.8	HIGH	2.0NVD	AV:N/AC:L/Au:N/C:C/I:N/A:N

CISA required action

⚡ Known exploited · remediation due Apr 15, 2022

Apply updates per vendor instructions.

Details

CVE ID: CVE-2015-0666
Status: Analyzed
Assigner (CNA): cisco
Published: Apr 3, 2015
Last modified: 2026-06-17 00:20 UTC
Weaknesses: CWE-22

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-07 13:41 UTC.