Vulnerability · Published Jul 21, 2022 · Assigned by cisco
CVE-2022-20858Cisco Nexus Dashboard Unauthorized Access Vulnerabilities
Critical 9.8
In plain English
A critical-severity missing authentication in Cisco Nexus Dashboard from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 70% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)1.3%top 29.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. For more information about these vulnerabilities, see the Details section of this advisory.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Nexus Dashboard | n/a |
Weakness: CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- 20220720 Cisco Nexus Dashboard Unauthorized Access Vulnerabilities vendor-advisory, x_refsource_CISCO