Cisco Nexus Dashboard
Monthly
Cisco Nexus Dashboard versions 2.1 through 4.2.1 contain information exposure and insecure handling vulnerabilities that allow authenticated low-privileged remote attackers to access sensitive information and potentially cause limited integrity impact. The flaws are addressed in a software hardening release and require network access to the management interface; no public exploit code exists at time of analysis. Cisco has released a patch per advisory cisco-sa-hardening-ndw1-psFvnrg.
Path traversal (CWE-22) in Cisco Nexus Dashboard lets a remote attacker holding valid low-privileged credentials (CVSS 3.1 vector AV:N/AC:L/PR:L/UI:N) send crafted requests that escape intended directory boundaries, yielding high confidentiality, integrity, and availability impact for an overall base score of 8.8. Cisco addressed this and several other internally discovered flaws as a group in a single software hardening release rather than documenting each issue individually, so the specific vulnerable feature or endpoint is not publicly enumerated. No public exploit code or confirmed active exploitation was identified at time of analysis; the decisive prerequisite is an existing authenticated session, meaning fully unauthenticated internet attackers cannot exploit it directly, but any Nexus Dashboard node whose API/UI is reachable by accounts of any privilege level should be treated as in scope until patched.
Cisco Nexus Dashboard is affected by multiple SQL injection vulnerabilities (CWE-89) that can be triggered by an authenticated attacker with low privileges over the network. Successful exploitation could allow reading, modifying, or deleting sensitive data and disrupting the management interface, with high impact to confidentiality, integrity, and availability as reflected in the CVSS 3.1 score of 8.8. No public exploit identified at time of analysis, and the authentication requirement combined with typical management network segmentation limits real-world risk.
Command injection (CWE-77) in Cisco Nexus Dashboard allows a remote, authenticated attacker holding low-privilege credentials to inject and execute arbitrary commands, carrying a vendor-assigned CVSS of 9.9 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) with high confidentiality, integrity, and availability impact and a Scope:Changed rating. The flaw was disclosed as one of multiple issues fixed in a grouped Cisco internal 'hardening release' advisory (cisco-sa-hardening-ndw1-psFvnrg) rather than a single externally reported CVE, so specific exploit prerequisites and exact affected version boundaries should be confirmed against that advisory's fixed-release table. Authentication is the primary limiting factor - the attacker must already possess valid low-privilege credentials or a session on the management interface - and no public exploit code or confirmed active exploitation was identified at time of analysis.
Improper access control in Cisco Nexus Dashboard, Cisco's data-center orchestration and management appliance, allows a network-positioned attacker who already holds a valid low-privileged account to exceed their intended permissions, with the scope-change (S:C) scoring producing full confidentiality, integrity, and availability impact. Cisco rates the flaw CVSS 9.9 (Critical) under vector AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H; because PR:L is required, this is explicitly an authenticated flaw - a legitimate or stolen operator-level credential is a prerequisite, and it is not unauthenticated. The issue was discovered during Cisco's internal security review and shipped in a hardening release, so no public exploit code exists and there is no confirmed active exploitation (no CISA KEV listing) at time of analysis; reachability is further limited because Nexus Dashboard is typically deployed on internal management networks rather than exposed to the internet.
Missing authentication for critical functions (CWE-306) in Cisco Nexus Dashboard allows unauthenticated, remote attackers to access protected functionality, resulting in a CVSS 9.8 (Critical) rating with high impact to confidentiality, integrity, and availability. No public exploit code has been identified at time of analysis, and real-world exploitation requires network reachability to the management interface, which is typically restricted to isolated management networks. The vulnerability is part of a Cisco hardening release addressing multiple internally discovered issues; exact affected versions and functions are not specified in available data.
Cisco Nexus Dashboard Insights metadata update feature allows authenticated administrators to write arbitrary files to the system with root privileges through path traversal in insufficiently validated metadata files. An attacker with valid administrative credentials can craft and manually upload a malicious metadata file to achieve arbitrary file write access to the underlying operating system. This vulnerability affects Cisco Nexus Dashboard and Nexus Dashboard Insights deployments, particularly those using manual metadata uploads in air-gap environments. CVSS score of 4.9 reflects the requirement for high-privilege authentication, though the integrity impact is rated as high given the ability to write files as root.
Server-side request forgery in Cisco Nexus Dashboard and Nexus Dashboard Insights allows unauthenticated remote attackers to conduct SSRF attacks by tricking authenticated users into clicking malicious links, enabling arbitrary network requests from the affected device and potential execution of arbitrary script code or access to sensitive browser data. CVSS 6.1 with no public exploit or active exploitation confirmed at time of analysis.
Cisco Nexus Dashboard configuration backup feature allows authenticated administrators to extract sensitive authentication credentials from encrypted backup files, enabling subsequent unauthorized access to internal APIs and arbitrary root-level command execution on the underlying operating system. The vulnerability requires possession of both a valid backup file and its encryption password, limiting exploitation to administrators or attackers with backup file access. CVSS 6.5 reflects the high-privilege requirement (PR:H) despite high confidentiality and integrity impact; no public exploit or active exploitation has been identified.
Cisco Nexus Dashboard versions 2.1 through 4.2.1 contain information exposure and insecure handling vulnerabilities that allow authenticated low-privileged remote attackers to access sensitive information and potentially cause limited integrity impact. The flaws are addressed in a software hardening release and require network access to the management interface; no public exploit code exists at time of analysis. Cisco has released a patch per advisory cisco-sa-hardening-ndw1-psFvnrg.
Path traversal (CWE-22) in Cisco Nexus Dashboard lets a remote attacker holding valid low-privileged credentials (CVSS 3.1 vector AV:N/AC:L/PR:L/UI:N) send crafted requests that escape intended directory boundaries, yielding high confidentiality, integrity, and availability impact for an overall base score of 8.8. Cisco addressed this and several other internally discovered flaws as a group in a single software hardening release rather than documenting each issue individually, so the specific vulnerable feature or endpoint is not publicly enumerated. No public exploit code or confirmed active exploitation was identified at time of analysis; the decisive prerequisite is an existing authenticated session, meaning fully unauthenticated internet attackers cannot exploit it directly, but any Nexus Dashboard node whose API/UI is reachable by accounts of any privilege level should be treated as in scope until patched.
Cisco Nexus Dashboard is affected by multiple SQL injection vulnerabilities (CWE-89) that can be triggered by an authenticated attacker with low privileges over the network. Successful exploitation could allow reading, modifying, or deleting sensitive data and disrupting the management interface, with high impact to confidentiality, integrity, and availability as reflected in the CVSS 3.1 score of 8.8. No public exploit identified at time of analysis, and the authentication requirement combined with typical management network segmentation limits real-world risk.
Command injection (CWE-77) in Cisco Nexus Dashboard allows a remote, authenticated attacker holding low-privilege credentials to inject and execute arbitrary commands, carrying a vendor-assigned CVSS of 9.9 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) with high confidentiality, integrity, and availability impact and a Scope:Changed rating. The flaw was disclosed as one of multiple issues fixed in a grouped Cisco internal 'hardening release' advisory (cisco-sa-hardening-ndw1-psFvnrg) rather than a single externally reported CVE, so specific exploit prerequisites and exact affected version boundaries should be confirmed against that advisory's fixed-release table. Authentication is the primary limiting factor - the attacker must already possess valid low-privilege credentials or a session on the management interface - and no public exploit code or confirmed active exploitation was identified at time of analysis.
Improper access control in Cisco Nexus Dashboard, Cisco's data-center orchestration and management appliance, allows a network-positioned attacker who already holds a valid low-privileged account to exceed their intended permissions, with the scope-change (S:C) scoring producing full confidentiality, integrity, and availability impact. Cisco rates the flaw CVSS 9.9 (Critical) under vector AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H; because PR:L is required, this is explicitly an authenticated flaw - a legitimate or stolen operator-level credential is a prerequisite, and it is not unauthenticated. The issue was discovered during Cisco's internal security review and shipped in a hardening release, so no public exploit code exists and there is no confirmed active exploitation (no CISA KEV listing) at time of analysis; reachability is further limited because Nexus Dashboard is typically deployed on internal management networks rather than exposed to the internet.
Missing authentication for critical functions (CWE-306) in Cisco Nexus Dashboard allows unauthenticated, remote attackers to access protected functionality, resulting in a CVSS 9.8 (Critical) rating with high impact to confidentiality, integrity, and availability. No public exploit code has been identified at time of analysis, and real-world exploitation requires network reachability to the management interface, which is typically restricted to isolated management networks. The vulnerability is part of a Cisco hardening release addressing multiple internally discovered issues; exact affected versions and functions are not specified in available data.
Cisco Nexus Dashboard Insights metadata update feature allows authenticated administrators to write arbitrary files to the system with root privileges through path traversal in insufficiently validated metadata files. An attacker with valid administrative credentials can craft and manually upload a malicious metadata file to achieve arbitrary file write access to the underlying operating system. This vulnerability affects Cisco Nexus Dashboard and Nexus Dashboard Insights deployments, particularly those using manual metadata uploads in air-gap environments. CVSS score of 4.9 reflects the requirement for high-privilege authentication, though the integrity impact is rated as high given the ability to write files as root.
Server-side request forgery in Cisco Nexus Dashboard and Nexus Dashboard Insights allows unauthenticated remote attackers to conduct SSRF attacks by tricking authenticated users into clicking malicious links, enabling arbitrary network requests from the affected device and potential execution of arbitrary script code or access to sensitive browser data. CVSS 6.1 with no public exploit or active exploitation confirmed at time of analysis.
Cisco Nexus Dashboard configuration backup feature allows authenticated administrators to extract sensitive authentication credentials from encrypted backup files, enabling subsequent unauthorized access to internal APIs and arbitrary root-level command execution on the underlying operating system. The vulnerability requires possession of both a valid backup file and its encryption password, limiting exploitation to administrators or attackers with backup file access. CVSS 6.5 reflects the high-privilege requirement (PR:H) despite high confidentiality and integrity impact; no public exploit or active exploitation has been identified.