DeutschShown in its original language — a full translation is planned for a future version.
Cisco Nexus Dashboard und Nexus Dashboard Fabric Controller: Mehrere Schwachstellen
view advisory published 2024-10-03
Ein entfernter Angreifer kann mehrere Schwachstellen in Cisco Nexus Dashboard ausnutzen, um Informationen offenzulegen Sicherheitsmaßnahmen zu umgehen und beliebigen Code, im schlimmsten Fall mit Administratorrechten, zur Ausführung zu bringen.
01
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-20491US | high8.6 | — | ||
A vulnerability in a logging function of Cisco Nexus Dashboard Insights could allow an attacker with access to a tech support file to view sensitive information.
This vulnerabil… | ||||
| CVE-2024-20490US | high8.6 | — | ||
A vulnerability in a logging function of Cisco Nexus Dashboard Fabric Controller (NDFC) and Cisco Nexus Dashboard Orchestrator (NDO) could allow an attacker with access to a tech s… | ||||
| CVE-2024-20477US | medium5.4OT elevated | — | ||
A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to upload or delete files on an affected device.
This… | ||||
| CVE-2024-20449US | high8.8 | — | ||
A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacker with low privileges to execute arbitrary code on an affected device.… | ||||
| CVE-2024-20448US | high8.6OT elevated | — | ||
A vulnerability in the Cisco Nexus Dashboard Fabric Controller (NDFC) software, formerly Cisco Data Center Network Manager (DCNM), could allow an attacker with access to a backup f… | ||||
| CVE-2024-20444US | medium5.5 | — | ||
A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-adm… | ||||
| CVE-2024-20442US | medium5.4OT elevated | — | ||
A vulnerability in the REST API endpoints of Cisco Nexus Dashboard could allow an authenticated, low-privileged, remote attacker to perform limited Administrator actions on an affe… | ||||
| CVE-2024-20441US | medium6.5 | — | ||
A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to learn sensitive information on an affected device.… | ||||
| CVE-2024-20438US | medium5.4OT elevated | — | ||
A vulnerability in the REST API endpoints of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to read or write files on an affected device.
This vulnerab… | ||||
| CVE-2024-20432US | high8.8 | — | ||
A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to perform a command inje… | ||||
| CVE-2024-20385US | medium5.9 | — | ||
A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an unauthenticated, remote attacker to intercept sensitive information from an… | ||||
02
references
External citations — patches, advisories, analysis.
- Cisco Security Advisory cisco-sa-ndfc-cidv-XvyX2wLj vom 2024-10-03external
- Cisco Security Advisory cisco-sa-ndfc-cmdinj-UvYZrKfr vom 2024-10-03external
- Cisco Security Advisory cisco-sa-ndfc-ptrce-BUSHLbp vom 2024-10-03external
- Cisco Security Advisory cisco-sa-ndfc-raci-T46k3jnN vom 2024-10-03external
- Cisco Security Advisory cisco-sa-ndhs-idv-Bk8VqEDc vom 2024-10-03external
- Cisco Security Advisory cisco-sa-ndhs-uaapi-Jh4V6zpN vom 2024-10-03external
- Cisco Security Advisory cisco-sa-ndo-tlsvld-FdUF3cpw vom 2024-10-03external
- WID-SEC-W-2024-3072 - CSAF Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan