# CVE-2015-0666

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.

- Page: https://www.vulneraibility.com/cve/CVE-2015-0666
- CVSS: 7.5
- Known exploited: yes, in CISA KEV since 2022-03-25; CISA due date 2022-04-15
- EPSS: 40.38% (percentile 98.7)
- CISA SSVC: exploitation active, automatable yes, technical impact partial (assessed 2024-11-08)
- Weakness: CWE-22
- Published: 2015-04-03

## Affected

- cisco:prime_data_center_network_manager

## References

- [other] http://www.securitytracker.com/id/1032009
- [advisory] http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-dcnm
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-0666

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.