{"vulnerability": "CVE-2019-1620", "sightings": [{"uuid": "c11d6956-0594-4365-a1f3-f1466108a5a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1620", "type": "exploited", "source": "https://www.exploit-db.com/exploits/47347", "content": "", "creation_timestamp": "2019-09-03T00:00:00.000000Z"}, {"uuid": "e0d1e824-7b64-4fbc-b3a4-ba530fa73215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1620", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "93dc7e72-af90-4410-9aed-f02ecd499a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1620", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:13.000000Z"}, {"uuid": "0dd91598-ac98-4569-bc18-f6b4ff88f3c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1620", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cisco_dcnm_upload_2019.rb", "content": "", "creation_timestamp": "2019-09-02T15:56:25.000000Z"}, {"uuid": "c946f489-a372-49ec-94c6-9821c51d714c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1620", "type": "seen", "source": "https://t.me/CyberGovIL/513", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1- Data Center Network Manager \u05e9\u05dc Cisco\nhttps://www.gov.il/he/departments/publications/reports/cisco-dcnm\n\n\u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05e2\u05d3\u05db\u05d5\u05e0\u05d9 \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e2\u05d1\u05d5\u05e8 2 \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1- (Data Center Network Manager (DCNM \u05e9\u05dc Cisco: \n1. \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea CVE-2019-1619 \u05d1\u05de\u05de\u05e9\u05e7 \u05d4\u05e0\u05d9\u05d4\u05d5\u05dc \u05de\u05d1\u05d5\u05e1\u05e1 Web \u05e9\u05dc \u05d4\u05e6\u05d9\u05d5\u05d3, \u05e2\u05dc\u05d5\u05dc\u05d4 \u05dc\u05d0\u05e4\u05e9\u05e8 \u05dc\u05ea\u05d5\u05e7\u05e3 \u05de\u05e8\u05d5\u05d7\u05e7 \u05d5\u05dc\u05d0 \u05de\u05d6\u05d5\u05d4\u05d4 \u05dc\u05e2\u05e7\u05d5\u05e3 \u05d0\u05ea \u05de\u05e0\u05d2\u05e0\u05d5\u05df \u05d4\u05d4\u05d6\u05d3\u05d4\u05d5\u05ea \u05d5\u05dc\u05d1\u05e6\u05e2 \u05e4\u05e2\u05d5\u05dc\u05d5\u05ea \u05e2\u05dc \u05d4\u05e8\u05db\u05d9\u05d1 \u05e2\u05dd \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea \u05d0\u05d3\u05de\u05d9\u05e0\u05d9\u05e1\u05d8\u05e8\u05d8\u05d9\u05d1\u05d9\u05d5\u05ea. \n2. \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea CVE-2019-1620 \u05d1\u05de\u05de\u05e9\u05e7 \u05d4\u05e0\u05d9\u05d4\u05d5\u05dc \u05de\u05d1\u05d5\u05e1\u05e1 Web \u05e9\u05dc \u05d4\u05e6\u05d9\u05d5\u05d3, \u05e2\u05dc\u05d5\u05dc\u05d4 \u05dc\u05d0\u05e4\u05e9\u05e8 \u05dc\u05ea\u05d5\u05e7\u05e3 \u05de\u05e8\u05d5\u05d7\u05e7 \u05d5\u05dc\u05d0 \u05de\u05d6\u05d5\u05d4\u05d4 \u05dc\u05d4\u05e2\u05dc\u05d5\u05ea \u05e7\u05d1\u05e6\u05d9\u05dd \u05dc\u05e8\u05db\u05d9\u05d1 \u05d5\u05dc\u05d4\u05e8\u05d9\u05e5 \u05e7\u05d5\u05d3 \u05e2\u05dc \u05d4\u05e8\u05db\u05d9\u05d1 \u05d1\u05d4\u05e8\u05e9\u05d0\u05d5\u05ea Root.", "creation_timestamp": "2019-07-01T12:04:50.000000Z"}, {"uuid": "bad7db08-01d5-4451-bf95-498e7733e436", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1620", "type": "seen", "source": "https://t.me/CyberGovIL/511", "content": "\u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05e2\u05d3\u05db\u05d5\u05e0\u05d9 \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e2\u05d1\u05d5\u05e8 2 \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1- Data Center Network Manager (DCNM) \u05e9\u05dc Cisco:\n\n\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea CVE-2019-1619 \u05d1\u05de\u05de\u05e9\u05e7 \u05d4\u05e0\u05d9\u05d4\u05d5\u05dc \u05de\u05d1\u05d5\u05e1\u05e1 Web \u05e9\u05dc \u05d4\u05e6\u05d9\u05d5\u05d3, \u05e2\u05dc\u05d5\u05dc\u05d4 \u05dc\u05d0\u05e4\u05e9\u05e8 \u05dc\u05ea\u05d5\u05e7\u05e3 \u05de\u05e8\u05d5\u05d7\u05e7 \u05d5\u05dc\u05d0 \u05de\u05d6\u05d5\u05d4\u05d4 \u05dc\u05e2\u05e7\u05d5\u05e3 \u05d0\u05ea \u05de\u05e0\u05d2\u05e0\u05d5\u05df \u05d4\u05d4\u05d6\u05d3\u05d4\u05d5\u05ea \u05d5\u05dc\u05d1\u05e6\u05e2 \u05e4\u05e2\u05d5\u05dc\u05d5\u05ea \u05e2\u05dc \u05d4\u05e8\u05db\u05d9\u05d1 \u05e2\u05dd \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea \u05d0\u05d3\u05de\u05d9\u05e0\u05d9\u05e1\u05d8\u05e8\u05d8\u05d9\u05d1\u05d9\u05d5\u05ea.\n\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea CVE-2019-1620 \u05d1\u05de\u05de\u05e9\u05e7 \u05d4\u05e0\u05d9\u05d4\u05d5\u05dc \u05de\u05d1\u05d5\u05e1\u05e1 Web \u05e9\u05dc \u05d4\u05e6\u05d9\u05d5\u05d3, \u05e2\u05dc\u05d5\u05dc\u05d4 \u05dc\u05d0\u05e4\u05e9\u05e8 \u05dc\u05ea\u05d5\u05e7\u05e3 \u05de\u05e8\u05d5\u05d7\u05e7 \u05d5\u05dc\u05d0 \u05de\u05d6\u05d5\u05d4\u05d4 \u05dc\u05d4\u05e2\u05dc\u05d5\u05ea \u05e7\u05d1\u05e6\u05d9\u05dd \u05dc\u05e8\u05db\u05d9\u05d1, \u05d5\u05dc\u05d4\u05e8\u05d9\u05e5 \u05e7\u05d5\u05d3 \u05e2\u05dc \u05d4\u05e8\u05db\u05d9\u05d1 \u05d1\u05d4\u05e8\u05e9\u05d0\u05d5\u05ea Root", "creation_timestamp": "2019-06-30T14:49:06.000000Z"}, {"uuid": "0634c913-5586-4e73-946d-dc79613baa39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-16201", "type": "seen", "source": "https://t.me/ctinow/195364", "content": "https://ift.tt/1BKkFG9\nCVE-2019-16201 | Ruby up to 2.4.7/2.5.6/2.6.4 Regular Expression looping/backtracking DigestAuth improper authentication (DLA 2027-1)", "creation_timestamp": "2024-02-28T12:07:05.000000Z"}, {"uuid": "846589d8-987d-48f0-b94b-7a54149afb67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-16200", "type": "seen", "source": "https://t.me/ctinow/192328", "content": "https://ift.tt/xwR0Lv5\nCVE-2019-16200 | GNU Serveez up to 0.2.2 /cgi-bin/reader http_cgi_write HTTP POST Request information disclosure", "creation_timestamp": "2024-02-24T00:26:30.000000Z"}, {"uuid": "9d61f093-ce7a-44a5-8337-0b12dafad5a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1620", "type": "seen", "source": "https://t.me/information_security_channel/28840", "content": "Cisco released security updates for Data Center Network Manager that allows an unauthenticated, remote attacker to upload arbitrary files on an affected device. CVE-2019-1620 \u2013 File Upload & Remote Code Execution The vulnerability resides in the web-based management interface of DCNM that allows an unauthenticated, remote attacker to upload arbitrary code on the affected device. [\u2026]\nThe post Cisco Security Updates  \u2013 Critical RCE vulnerability let Hackers Gain Control Over Cisco Data Center Network Manager Remotely (https://gbhackers.com/cisco-security-updates-for-dcnm/) appeared first on GBHackers On Security (https://gbhackers.com/).", "creation_timestamp": "2019-06-27T10:42:33.000000Z"}, {"uuid": "355535ae-5913-46b1-9fa1-f10e74116eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1620", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cisco_dcnm_upload_2019.rb", "content": "{\"aliases\": [], \"arch\": \"java\", \"author\": [\"Pedro Ribeiro \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"DCNM exposes a file upload servlet (FileUploadServlet) at /fm/fileUpload.\\n          An authenticated user can abuse this servlet to upload a WAR to the Apache Tomcat webapps\\n          directory and achieve remote code execution as root.\\n          This module exploits two other vulnerabilities, CVE-2019-1619 for authentication bypass on\\n          versions 10.4(2) and below, and CVE-2019-1622 (information disclosure) to obtain the correct\\n          directory for the WAR file upload.\\n          This module was tested on the DCNM Linux virtual appliance 10.4(2), 11.0(1) and 11.1(1), and should\\n          work on a few versions below 10.4(2). Only version 11.0(1) requires authentication to exploit\\n          (see References to understand why).\", \"disclosure_date\": \"2019-06-26\", \"fullname\": \"exploit/multi/http/cisco_dcnm_upload_2019\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:58 +0000\", \"name\": \"Cisco Data Center Network Manager Unauthenticated Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/cisco_dcnm_upload_2019.rb\", \"platform\": \"Java\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/cisco_dcnm_upload_2019\", \"references\": [\"CVE-2019-1619\", \"CVE-2019-1620\", \"CVE-2019-1622\", \"URL-https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190626-dcnm-bypass\", \"URL-https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190626-dcnm-codex\", \"URL-https://raw.githubusercontent.com/pedrib/PoC/master/advisories/Cisco/cisco-dcnm-rce.txt\", \"URL-https://seclists.org/fulldisclosure/2019/Jul/7\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Automatic\", \"Cisco DCNM 11.1(1)\", \"Cisco DCNM 11.0(1)\", \"Cisco DCNM 10.4(2)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:44.071303Z"}]}