Cisco Nexus Dashboard vulnerabilities

CVE-2022-20909 [MEDIUM] CWE-367 CVE-2022-20909: Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to el Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. These vulnerabilities are due to insufficient input validation during CLI command execution on an affected device. An attacker could exploit these vulnerabilities by authenticating as the rescue-user and executi

CVE-2022-20908 [MEDIUM] CWE-367 CVE-2022-20908: Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to el Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. These vulnerabilities are due to insufficient input validation during CLI command execution on an affected device. An attacker could exploit these vulnerabilities by authenticating as the rescue-user and executi

CVE-2022-20906 [MEDIUM] CWE-367 CVE-2022-20906: Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to el Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. These vulnerabilities are due to insufficient input validation during CLI command execution on an affected device. An attacker could exploit these vulnerabilities by authenticating as the rescue-user and executi

CVE-2022-20907 [MEDIUM] CWE-367 CVE-2022-20907: Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to el Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. These vulnerabilities are due to insufficient input validation during CLI command execution on an affected device. An attacker could exploit these vulnerabilities by authenticating as the rescue-user and executi

CVE-2025-20348 [MEDIUM] CWE-201 CVE-2025-20348: A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload and modify files on an affected device. This vulnerability exists because of missing authorization controls on some REST API endpoi

CVE-2024-20282 [MEDIUM] CWE-269 CVE-2024-20282: A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid res A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an affected device. This vulnerability is due to insufficient protections for a sensitive access token. An attacker could exploit this vulnerability by using this token to access resources within t

CVE-2023-20053 [MEDIUM] CWE-79 CVE-2023-20053: A vulnerability in the web-based management interface of Cisco Nexus Dashboard could allow an unauth A vulnerability in the web-based management interface of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulner

CVE-2024-20283 [MEDIUM] CWE-284 CVE-2024-20283: A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to learn clus A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to learn cluster deployment information on an affected device. This vulnerability is due to improper access controls on a specific API endpoint. An attacker could exploit this vulnerability by sending queries to the API endpoint. A successful exploit could allow a