Skip to content
6.0 Medium

CVE-2022-20906 Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges…

Description

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. These vulnerabilities are due to insufficient input validation during CLI command execution on an affected device. An attacker could exploit these vulnerabilities by authenticating as the rescue-user and executing vulnerable CLI commands using a malicious payload. A successful exploit could allow the attacker to elevate privileges to root on an affected device.

Affected products and versions

Product Affected versions Fixed in
Cisco Nexus Dashboard Versions not published

References

Timeline

  1. Published
  2. Last modified
The 28 CVEs of Cisco Nexus Dashboard →
Track this CVE