6.5
Medium
CVE-2025-20344 A vulnerability in the backup restore functionality of Cisco Nexus Dashboard could allow an authenticated, remote…
Description
A vulnerability in the backup restore functionality of Cisco Nexus Dashboard could allow an authenticated, remote attacker to conduct a path traversal attack on an affected device. This vulnerability is due to insufficient validation of the contents of a backup file. An attacker with valid Administrator credentials could exploit this vulnerability by restoring a crafted backup file to an affected device. A successful exploit could allow the attacker to gain root privileges on the underlying shell on the affected device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Nexus Dashboard | Versions not published |
References
- cisco-sa-nd-ptrs-XU2Fm2Wb sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Nexus Dashboard
The 28 CVEs of Cisco Nexus Dashboard →
CVE-2026-20360
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering…
8.8
High
CVE-2026-76409
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering…
8.8
High
CVE-2026-20361
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering…
8.8
High
CVE-2026-20325
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus…
9.9
Critical