Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilities
Multiple vulnerabilities in the REST APIs of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to perform a limited set of network-admin functions on an affected device. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-20477US | medium5.4OT erhöht | — | ||
A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to upload or delete files on an affected device.
This… | ||||
| CVE-2024-20442US | medium5.4OT erhöht | — | ||
A vulnerability in the REST API endpoints of Cisco Nexus Dashboard could allow an authenticated, low-privileged, remote attacker to perform limited Administrator actions on an affe… | ||||
| CVE-2024-20441US | medium6.5 | — | ||
A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to learn sensitive information on an affected device.… | ||||
| CVE-2024-20438US | medium5.4OT erhöht | — | ||
A vulnerability in the REST API endpoints of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to read or write files on an affected device.
This vulnerab… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Security Vulnerability Policyexternal
- CSCwj09986external
- CSCwj33029external
- CSCwk04220external
- CSCwk04255external
- CSCwk11265external
- Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilitiesself
- Cisco Security Vulnerability Policyexternal
Behebungen (4)
- BehobenCisco Data Center Network Manager
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Data Center Network Manager
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Data Center Network Manager
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Nexus Dashboard
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan