CVE-2012-5417

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-11-02 · updated 2026-06-16
Weakness: CWE-264

Description

Cisco Prime Data Center Network Manager (DCNM) before 6.1(1) does not properly restrict access to certain JBoss MainDeployer functionality, which allows remote attackers to execute arbitrary commands via JBoss Application Server Remote Method Invocation (RMI) services, aka Bug ID CSCtz44924.

Affected products

Cisco Prime Data Center Network Manager Debug Remote Code Execution Vulnerability: 4.1(2), 4.1(3), 4.1(4), 4.1(5), 4.2(1), 4.2(3) (+12)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121031-dcnm
http://www.securityfocus.com/bid/56348
http://www.securitytracker.com/id?1027712
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121031-dcnm
http://www.securityfocus.com/bid/56348
http://www.securitytracker.com/id?1027712

Get alerted when CVE-2012-5417 or the next vulnerability affects your stack