Remote Code Injection and XSS Vulnerabilities in Cisco Data Center Network Manager

CVE-2017-12347

Summary

Cisco Data Center Network Manager (DCNM) Software is affected by multiple vulnerabilities that could permit an attacker to inject arbitrary values into configuration parameters, potentially leading to unauthorized configuration changes, user redirection to malicious sites, and the ability to perform cross-site scripting (XSS) attacks on users utilizing the software. These vulnerabilities expose organizations to significant security risks, as they can be exploited without requiring physical access to the network.

References