CVE-2015-0666
High 7.5 Exploited in the wild (KEV)
Confirmed active exploitation — CISA KEV catalog
- Name
- Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.
Metrics
- CVSS 3.1
-
7.5 (HIGH)
Score source: CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS — exploit probability
- 40% (percentile: 99) as of 1 November 2026
- CWE
- CWE-22
Affected products
cisco: prime data center network manager
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2… Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2… Vendor Advisory
- http://www.securitytracker.com/id/1032009 Broken Link
- http://www.securitytracker.com/id/1032009 Broken Link
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015… US Government Resource