CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2022-20858

CVSS 9.8v3.1pub. 2022-07-21upd. 2024-11-21

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Cisco Nexus Dashboard

    APP
    Cisco
    2.0 – 2.2\(1e\) (excl.)
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Container
CWE
References

Related vulnerabilities

CVE-2022-20857CRITICAL9.8PL ✓same product

Cisco Nexus Dashboard — RCE i nieautoryzowany dostęp bez uwierzytelnienia

CVE-2022-20861CRITICAL9.8PL ✓same product

Cisco Nexus Dashboard — RCE i CSRF bez uwierzytelnienia

CVE-2025-20163HIGH8.7same product

A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an una...

CVE-2024-20281HIGH7.5same product

A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hoste...

CVE-2023-20014HIGH7.5same product

A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, rem...