cisco-sa-ndb-mhcvuln-vpsBPJ9y: Cisco Nexus Dashboard Unauthorized Access Vulnerabilities
First published: Wed Jul 20 2022(Updated: )
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndb-mhcvuln-vpsBPJ9y
Credit: Michael J Davenport the Cisco Advanced Security Initiatives Group
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Nexus Dashboard | >=1.1=2.0=2.1<=2.2<2.2(1e) | 2.2(1e) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the vulnerability ID of Cisco Nexus Dashboard Unauthorized Access Vulnerabilities?
The vulnerability ID is cisco-sa-ndb-mhcvuln-vpsBPJ9y.
What is the severity of Cisco Nexus Dashboard Unauthorized Access Vulnerabilities?
The severity is critical with a CVSS score of 9.8.
How can an attacker exploit Cisco Nexus Dashboard Unauthorized Access Vulnerabilities?
An attacker can exploit these vulnerabilities by executing arbitrary commands, reading or uploading container image files, or performing a cross-site request forgery attack.
Which versions of Cisco Nexus Dashboard are affected by this vulnerability?
Versions 1.1 to 2.2(1e) of Cisco Nexus Dashboard are affected.
What is the recommended remedy for Cisco Nexus Dashboard Unauthorized Access Vulnerabilities?
To remediate these vulnerabilities, update Cisco Nexus Dashboard to version 2.2(1e) or later.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/weakness
- agent/severity
- agent/references
- agent/title
- agent/author
- agent/tags
- agent/description
- agent/event
- vendor/cisco
- canonical/cisco nexus dashboard
- version/cisco nexus dashboard/1.1
- version/cisco nexus dashboard/2.0
- version/cisco nexus dashboard/2.1
- version/cisco nexus dashboard/2.2