A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacker with low privileges to execute arbitrary code on an affected device. This vulnerability is due to improper path validation. An attacker could exploit this vulnerability by using the Secure Copy Protocol (SCP) to upload malicious code to an affected device using path traversal techniques. A successful exploit could allow the attacker to execute arbitrary code in a specific container with the privileges of root.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCisco Nexus Dashboard Fabric Controller
APPCisco12.0.0 – 12.2.2
Powiązane podatności
Command injection w Cisco Nexus Dashboard Fabric Controller (REST API i web UI)
A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Cont...
A vulnerability in the Out-of-Band (OOB) Plug and Play (PnP) feature of Cisco Nexus Dashboard Fabric Controlle...
A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hoste...
A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, re...