Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilities
Multiple vulnerabilities in the REST APIs of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to perform a limited set of network-admin functions on an affected device. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-20477US | medium5.4OT elevated | — | ||
A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to upload or delete files on an affected device.
This… | ||||
| CVE-2024-20442US | medium5.4OT elevated | — | ||
A vulnerability in the REST API endpoints of Cisco Nexus Dashboard could allow an authenticated, low-privileged, remote attacker to perform limited Administrator actions on an affe… | ||||
| CVE-2024-20441US | medium6.5 | — | ||
A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to learn sensitive information on an affected device.… | ||||
| CVE-2024-20438US | medium5.4OT elevated | — | ||
A vulnerability in the REST API endpoints of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to read or write files on an affected device.
This vulnerab… | ||||
references
External citations — patches, advisories, analysis.
- Security Vulnerability Policyexternal
- CSCwj09986external
- CSCwj33029external
- CSCwk04220external
- CSCwk04255external
- CSCwk11265external
- Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilitiesself
- Cisco Security Vulnerability Policyexternal
remediations (4)
- FixedCisco Data Center Network Manager
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Data Center Network Manager
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Data Center Network Manager
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Nexus Dashboard
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan