DeutschShown in its original language — a full translation is planned for a future version.
Cisco Nexus Dashboard: Mehrere Schwachstellen
view advisory published 2024-04-03
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Cisco Nexus Dashboard ausnutzen, um beliebigen Programmcode auszuführen, seine Privilegien zu erweitern, Daten zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder Informationen offenzulegen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-20348US | high7.5 | — | ||
A vulnerability in the Out-of-Band (OOB) Plug and Play (PnP) feature of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to read arbit… | ||||
| CVE-2024-20302US | medium4.3 | — | ||
A vulnerability in the tenant security implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an authenticated, remote attacker to modify or delete tenant templates… | ||||
| CVE-2024-20283US | medium4.3 | — | ||
A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to learn cluster deployment information on an affected device.
This vulnerability is due t… | ||||
| CVE-2024-20282US | medium6.0 | — | ||
A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an affected device.
Thi… | ||||
| CVE-2024-20281US | high8.8 | — | ||
A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hosted services could allow an unauthenticated, remote attacker to conduct… | ||||
02
references
External citations — patches, advisories, analysis.
- Cisco Security Advisory cisco-sa-ndfc-dir-trav-SSn3AYDw vom 2024-04-03external
- Cisco Security Advisory cisco-sa-ndfccsrf-TEmZEfJ9 vom 2024-04-03external
- Cisco Security Advisory cisco-sa-ndidv-LmXdvAf2 vom 2024-04-03external
- Cisco Security Advisory cisco-sa-ndo-upav-YRqsCcSP vom 2024-04-03external
- Cisco Security Advisory cisco-sa-ndru-pesc-kZ2PQLZH vom 2024-04-03external
- WID-SEC-W-2024-0777 - CSAF Versionself
- WID-SEC-2024-0777 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan