CVE-2015-0666

Cisco Prime DCNM allowed remote attackers to read arbitrary files via a directory traversal flaw in its fmserver servlet.

A directory traversal vulnerability in Cisco Prime Data Center Network Manager (DCNM) enabled remote attackers to read arbitrary files on the server. For DIB organizations, this means unpatched legacy network management tools can expose sensitive configuration data and credentials to threat actors, directly impacting compliance with NIST 800-171 requirements for protecting unclassified information. Organizations must inventory and patch or replace such legacy management platforms immediately to prevent data exfiltration and maintain compliance posture.

Shame score — A known directory traversal vulnerability in a widely deployed network management tool was left unpatched long enough to be actively exploited in the wild, demonstrating negligence in maintaining critical infrastructure software.