CVE-2022-20857

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. For more information about these vulnerabilities, see the Details section of this advisory.

Score

CVSS 3.1 9.8 Critical

Status

Modified - psirt@cisco.com

Published

2022-07-21

Last modified

2024-11-01

Weaknesses

CWE-306

Affected products

• Cisco Nexus Dashboard (Cisco)
• Nexus Dashboard (Cisco)

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndb-mhcvuln-vpsBPJ9y