cisco-sa-ndb-mhcvuln-vpsBPJ9y: Cisco Nexus Dashboard Unauthorized Access Vulnerabilities
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndb-mhcvuln-vpsBPJ9y
Credit
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID of Cisco Nexus Dashboard Unauthorized Access Vulnerabilities?
The vulnerability ID is cisco-sa-ndb-mhcvuln-vpsBPJ9y.
What is the severity of Cisco Nexus Dashboard Unauthorized Access Vulnerabilities?
The severity is critical with a CVSS score of 9.8.
How can an attacker exploit Cisco Nexus Dashboard Unauthorized Access Vulnerabilities?
An attacker can exploit these vulnerabilities by executing arbitrary commands, reading or uploading container image files, or performing a cross-site request forgery attack.
Which versions of Cisco Nexus Dashboard are affected by this vulnerability?
Versions 1.1 to 2.2(1e) of Cisco Nexus Dashboard are affected.
What is the recommended remedy for Cisco Nexus Dashboard Unauthorized Access Vulnerabilities?
To remediate these vulnerabilities, update Cisco Nexus Dashboard to version 2.2(1e) or later.