How does CVE-2023-20053 affect Cisco Nexus Dashboard?

CVE-2023-20053 affects the web-based management interface of Cisco Nexus Dashboard by allowing an unauthenticated, remote attacker to conduct an XSS attack.

What is the severity of CVE-2023-20053?

The severity of CVE-2023-20053 is medium, with a CVSS score of 6.1.

How can an attacker exploit CVE-2023-20053?

An attacker can exploit CVE-2023-20053 by sending malicious code to a user of the web-based management interface, which is then executed in the context of that user's session.

Is there a fix available for CVE-2023-20053?

Yes, Cisco has released software updates to address the vulnerability. Please refer to the Cisco Security Advisory for more information.

Vulnerability/
CVE-2023-20053

medium

6.1

CWE

79 20

16/2/2023

21/11/2024

CVE-2023-20053: XSS

Q: What is CVE-2023-20053?

CVE-2023-20053 is a vulnerability in the web-based management interface of Cisco Nexus Dashboard that allows for a cross-site scripting (XSS) attack.

First published: Thu Feb 16 2023(Updated: )

A vulnerability in the web-based management interface of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Credit: ykramarz@cisco.com ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco Nexus Dashboard	<2.3\(1c\)

Never miss a vulnerability like this again

Reference Links

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nexus-dashboard-xss-xc5BcgsQ

Frequently Asked Questions

What is CVE-2023-20053?
CVE-2023-20053 is a vulnerability in the web-based management interface of Cisco Nexus Dashboard that allows for a cross-site scripting (XSS) attack.
How does CVE-2023-20053 affect Cisco Nexus Dashboard?
CVE-2023-20053 affects the web-based management interface of Cisco Nexus Dashboard by allowing an unauthenticated, remote attacker to conduct an XSS attack.
What is the severity of CVE-2023-20053?
The severity of CVE-2023-20053 is medium, with a CVSS score of 6.1.
How can an attacker exploit CVE-2023-20053?
An attacker can exploit CVE-2023-20053 by sending malicious code to a user of the web-based management interface, which is then executed in the context of that user's session.
Is there a fix available for CVE-2023-20053?
Yes, Cisco has released software updates to address the vulnerability. Please refer to the Cisco Security Advisory for more information.

collector/nvd-index
agent/weakness
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/references
agent/author
agent/severity
agent/last-modified-date
agent/description
agent/event
agent/first-publish-date
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup
vendor/cisco
canonical/cisco nexus dashboard

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.