CVE-2024-20477
published 2024-10-02CVE-2024-20477: A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to upload or delete files on an…
PriorityP335medium5.4CVSS 3.1
AVNACLPRLUINSUCNILAL
EPSS
0.45%
36.4th percentile
A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to upload or delete files on an affected device.
This vulnerability exists because of missing authorization controls on the affected REST API endpoint. An attacker could exploit this vulnerability by sending crafted API requests to the affected endpoint. A successful exploit could allow the attacker to upload files into a specific container or delete files from a specific folder within that container. This vulnerability only affects a specific REST API endpoint and does not affect the web-based management interface.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cisco_data_center_network_manager | — | — |
| cisco | cisco_data_center_network_manager | — | — |
| cisco | cisco_data_center_network_manager | — | — |
| cisco | cisco_data_center_network_manager | — | — |
| cisco | cisco_data_center_network_manager | — | — |
| cisco | cisco_data_center_network_manager | — | — |
| cisco | cisco_data_center_network_manager | — | — |
| cisco | cisco_data_center_network_manager | — | — |
| cisco | cisco_data_center_network_manager | — | — |
| cisco | cisco_data_center_network_manager | — | — |
| cisco | cisco_data_center_network_manager | — | — |
| cisco | nexus_dashboard | < 3.2\(1e\) | 3.2\(1e\) |
| cisco | nexus_dashboard_and_nexus_dashboard_fabric_controller_unauthorized_rest | — | — |
| cisco | nexus_dashboard_fabric_controller | >= 12.0.0 < 12.2.2 | 12.2.2 |
CVSS provenance
nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
vendor_cisco6.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilities
vendor_cisco·2024-10-02·CVSS 6.3
CVE-2024-20438 [MEDIUM] CWE-285 Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilities
Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilities
Multiple vulnerabilities in the REST APIs of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to perform a limited set of network-admin functions on an affected device.
For more information about these vulnerabilities, see the Details section of this advisory.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndhs-uaapi-Jh4V6zpN
Cisco
Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilities
vendor_cisco·CVSS 3.1
CVE-2024-20477 Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilities
CVE-2024-20477: Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilities
Multiple vulnerabilities in the REST APIs of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to perform a limited set of network-admin functions on an affected device. For more information about these vulnerabilities, see the
CVSS: 3.1
CWE: CWE-285, CWE-693, CWE-862, CWE-285, CWE-693, CWE-862
Bug IDs: CSCwj09986, CSCwj33029, CSCwk04220, CSCwj09986, CSCwj33029
GHSA
GHSA-m728-ff6j-xcqp: A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to upload or delete files
ghsa_unreviewed·2024-10-02
CVE-2024-20477 [MEDIUM] CWE-862 GHSA-m728-ff6j-xcqp: A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to upload or delete files
A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to upload or delete files on an affected device.
This vulnerability exists because of missing authorization controls on the affected REST API endpoint. An attacker could exploit this vulnerability by sending crafted API requests to the affected endpoint. A successful exploit could allow the attacker to upload files into a specific container or delete files from a specific folder within that container. This vulnerability only affects a specific REST API endpoint and does not affect the web-based management interface.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-10-02
Published