6.0
Medium
CVE-2022-20906 Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges…
Description
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. These vulnerabilities are due to insufficient input validation during CLI command execution on an affected device. An attacker could exploit these vulnerabilities by authenticating as the rescue-user and executing vulnerable CLI commands using a malicious payload. A successful exploit could allow the attacker to elevate privileges to root on an affected device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Nexus Dashboard | Versions not published |
References
Timeline
- Published
- Last modified
Other CVEs of Cisco Nexus Dashboard
The 28 CVEs of Cisco Nexus Dashboard →
CVE-2026-20360
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering…
8.8
High
CVE-2026-76409
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering…
8.8
High
CVE-2026-20361
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering…
8.8
High
CVE-2026-20325
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus…
9.9
Critical