DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Cisco Nexus Dashboard und Nexus Dashboard Fabric Controller: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-10-03
Ein entfernter Angreifer kann mehrere Schwachstellen in Cisco Nexus Dashboard ausnutzen, um Informationen offenzulegen Sicherheitsmaßnahmen zu umgehen und beliebigen Code, im schlimmsten Fall mit Administratorrechten, zur Ausführung zu bringen.
01
beschreibt (11)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-20491US | high8.6 | — | ||
A vulnerability in a logging function of Cisco Nexus Dashboard Insights could allow an attacker with access to a tech support file to view sensitive information.
This vulnerabil… | ||||
| CVE-2024-20490US | high8.6 | — | ||
A vulnerability in a logging function of Cisco Nexus Dashboard Fabric Controller (NDFC) and Cisco Nexus Dashboard Orchestrator (NDO) could allow an attacker with access to a tech s… | ||||
| CVE-2024-20477US | medium5.4OT erhöht | — | ||
A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to upload or delete files on an affected device.
This… | ||||
| CVE-2024-20449US | high8.8 | — | ||
A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacker with low privileges to execute arbitrary code on an affected device.… | ||||
| CVE-2024-20448US | high8.6OT erhöht | — | ||
A vulnerability in the Cisco Nexus Dashboard Fabric Controller (NDFC) software, formerly Cisco Data Center Network Manager (DCNM), could allow an attacker with access to a backup f… | ||||
| CVE-2024-20444US | medium5.5 | — | ||
A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-adm… | ||||
| CVE-2024-20442US | medium5.4OT erhöht | — | ||
A vulnerability in the REST API endpoints of Cisco Nexus Dashboard could allow an authenticated, low-privileged, remote attacker to perform limited Administrator actions on an affe… | ||||
| CVE-2024-20441US | medium6.5 | — | ||
A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to learn sensitive information on an affected device.… | ||||
| CVE-2024-20438US | medium5.4OT erhöht | — | ||
A vulnerability in the REST API endpoints of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to read or write files on an affected device.
This vulnerab… | ||||
| CVE-2024-20432US | high8.8 | — | ||
A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to perform a command inje… | ||||
| CVE-2024-20385US | medium5.9 | — | ||
A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an unauthenticated, remote attacker to intercept sensitive information from an… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cisco Security Advisory cisco-sa-ndfc-cidv-XvyX2wLj vom 2024-10-03external
- Cisco Security Advisory cisco-sa-ndfc-cmdinj-UvYZrKfr vom 2024-10-03external
- Cisco Security Advisory cisco-sa-ndfc-ptrce-BUSHLbp vom 2024-10-03external
- Cisco Security Advisory cisco-sa-ndfc-raci-T46k3jnN vom 2024-10-03external
- Cisco Security Advisory cisco-sa-ndhs-idv-Bk8VqEDc vom 2024-10-03external
- Cisco Security Advisory cisco-sa-ndhs-uaapi-Jh4V6zpN vom 2024-10-03external
- Cisco Security Advisory cisco-sa-ndo-tlsvld-FdUF3cpw vom 2024-10-03external
- WID-SEC-W-2024-3072 - CSAF Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan