cisco-sa-ndfc-dir-trav-SSn3AYDw: Cisco Nexus Dashboard Fabric Controller Plug and Play Arbitrary File Read Vulnerability
A vulnerability in the Out-of-Band (OOB) Plug and Play (PnP) feature of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to read arbitrary files.This vulnerability is due to an unauthenticated provisioning web server. An attacker could
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-ndfc-dir-trav-SSn3AYDw?
The vulnerability cisco-sa-ndfc-dir-trav-SSn3AYDw is rated as critical due to its potential for unauthorized file access.
How do I fix cisco-sa-ndfc-dir-trav-SSn3AYDw?
To mitigate the cisco-sa-ndfc-dir-trav-SSn3AYDw vulnerability, users should apply the latest security patches provided by Cisco for Nexus Dashboard Fabric Controller.
Who is affected by cisco-sa-ndfc-dir-trav-SSn3AYDw?
cisco-sa-ndfc-dir-trav-SSn3AYDw affects users of Cisco Nexus Dashboard Fabric Controller who utilize the Out-of-Band Plug and Play feature.
What can an attacker do with cisco-sa-ndfc-dir-trav-SSn3AYDw?
An attacker exploiting cisco-sa-ndfc-dir-trav-SSn3AYDw can read arbitrary files from the system without authentication.
What is the nature of the vulnerability cisco-sa-ndfc-dir-trav-SSn3AYDw?
cisco-sa-ndfc-dir-trav-SSn3AYDw involves an unauthenticated provisioning web server that exposes file access vulnerabilities.