Lucene search

CiscoCVE-2022-20861

HistoryJul 21, 2022 - 4:15 a.m.

CVE-2022-20861

2022-07-2104:15:10

CWE-352

CWE-306

cisco

web.nvd.nist.gov

cisco

nexus dashboard

vulnerability

cve-2022-20861

remote attack

arbitrary commands

csrf

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

41.0%

JSON

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. For more information about these vulnerabilities, see the Details section of this advisory.

Affected configurations

Nvd

Node

cisconexus_dashboardRange1.1–2.2\(1e\)

VendorProductVersionCPE
cisconexus_dashboard*cpe:2.3:a:cisco:nexus_dashboard:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	nexus_dashboard	*	cpe:2.3:a:cisco:nexus_dashboard::::::::

CNA Affected

[
  {
    "product": "Cisco Nexus Dashboard",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndb-mhcvuln-vpsBPJ9y

Social References

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

41.0%

JSON

Related for CVE-2022-20861