CVE-2022-20858: Cisco Nexus Dashboard Unauthorized Access Vulnerabilities
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. For more information about these vulnerabilities, see the Details section of this advisory.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-20858?
CVE-2022-20858 is a vulnerability in Cisco Nexus Dashboard that could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack.
How severe is CVE-2022-20858?
CVE-2022-20858 has a severity rating of 9.8, which is considered critical.
Which software is affected by CVE-2022-20858?
Cisco Nexus Dashboard versions 2.0 to 2.2(1e) are affected by CVE-2022-20858.
How can an attacker exploit CVE-2022-20858?
An unauthenticated, remote attacker can exploit CVE-2022-20858 to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack.
Where can I find more information about CVE-2022-20858?
You can find more information about CVE-2022-20858 in the Cisco Security Advisory at the following link: [Cisco Security Advisory](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndb-mhcvuln-vpsBPJ9y)