CVE-2022-20857: Cisco Nexus Dashboard Unauthorized Access Vulnerabilities
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. For more information about these vulnerabilities, see the Details section of this advisory.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-20857?
CVE-2022-20857 is a vulnerability in Cisco Nexus Dashboard that allows an unauthenticated remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack.
How severe is CVE-2022-20857?
CVE-2022-20857 has a severity rating of 9.8 out of 10, making it a critical vulnerability.
What software is affected by CVE-2022-20857?
Cisco Nexus Dashboard versions from 1.0 to 2.2(1e) are affected by CVE-2022-20857.
How can an attacker exploit CVE-2022-20857?
An unauthenticated remote attacker can exploit CVE-2022-20857 to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack.
Is there a fix available for CVE-2022-20857?
Yes, Cisco has released a security advisory with information on how to mitigate the vulnerabilities associated with CVE-2022-20857. Please refer to the Cisco Security Advisory for more details.