CVE-2020-3377 is a command injection vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) that allows an authenticated, remote attacker to execute arbitrary commands. This high-severity vulnerability (CVSS 8.8) is due to insufficient input validation, enabling an attacker to run commands as the administrator. While no public exploits or Metasploit modules are available, the vulnerability has garnered some community discussion and media coverage, though it is not currently on CISA's KEV catalog.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
11.0\(1\)CPE matchmatch criteria | cpe:2.3:a:cisco:data_center_network_manager:11.0\(1\):*:*:*:*:*:*:* | ||
11.1\(1\)CPE matchmatch criteria | cpe:2.3:a:cisco:data_center_network_manager:11.1\(1\):*:*:*:*:*:*:* | ||
11.2\(1\)CPE matchmatch criteria | cpe:2.3:a:cisco:data_center_network_manager:11.2\(1\):*:*:*:*:*:*:* | ||
11.3\(1\)CPE matchmatch criteria | cpe:2.3:a:cisco:data_center_network_manager:11.3\(1\):*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.