CVE-2015-0666: Cisco Prime DCNM fmserver servlet path traversal file read

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 17 September 2026. Confidence: high.

high priorityKnown exploitation is confirmed by CISA KEV and the flaw allows unauthenticated remote file disclosure on a management platform, though impact is limited to confidentiality.

What it is

The fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) is vulnerable to directory traversal, letting a remote attacker read arbitrary files by supplying a crafted pathname. Because DCNM is a management platform, exposed file contents can include configuration and credential material, making this a serious information-disclosure issue.

Impact

An attacker gains read access to arbitrary files on the DCNM host, which can expose configuration data, credentials or other sensitive content. There is no integrity or availability impact per the CVSS vector.

Attack surface

Reachable over the network through the fmserver servlet; the CVSS vector shows no privileges and no user interaction required. Any host that can reach the DCNM web interface can attempt the crafted pathname.

Exploitation

It is listed in CISA KEV with a 2022-03-25 addition date, indicating known exploitation in the wild, and EPSS gives a 30-day probability of about 0.40 (98.6th percentile). No ransomware campaign use is documented.

What to do

• Upgrade Cisco Prime DCNM to 7.1(1) or later per the Cisco advisory.
• If immediate upgrade is not possible, restrict network access to the DCNM web interface to trusted management networks only.
• Place DCNM behind a reverse proxy or WAF rule that blocks traversal sequences in request paths.
• Rotate any credentials or secrets that may have been stored in files readable on the DCNM host.
• Monitor Cisco advisories for further updates on this product line.

Detection

• Search web or proxy logs for requests to the fmserver servlet containing traversal sequences such as ../ or encoded variants.
• Alert on unusual file-read patterns or errors from the DCNM host that suggest path manipulation attempts.
• Review DCNM host file access logs for reads of sensitive files outside expected application paths.
• Correlate DCNM access logs with outbound connections from the DCNM server to unknown hosts.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.