ZDI-22-507: Cisco Nexus Dashboard Fabric Controller Improper Privilege Management Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Cisco Nexus Dashboard Fabric Controller. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of a user permission. A crafted tcpdump command can trigger execution of a privileged operation. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-22-507?
The severity of ZDI-22-507 is classified as high due to its potential to allow privilege escalation.
How do I fix ZDI-22-507?
To fix ZDI-22-507, update the Cisco Nexus Dashboard Fabric Controller to the latest patched version provided by Cisco.
What systems are affected by ZDI-22-507?
ZDI-22-507 affects installations of Cisco Nexus Dashboard Fabric Controller.
Can an attacker exploit ZDI-22-507 remotely?
No, an attacker must have local access to execute low-privileged code before exploiting ZDI-22-507.
What is the impact of ZDI-22-507?
The impact of ZDI-22-507 is that it allows local attackers to escalate their privileges on the affected system.