cvelistv5 - cve-2024-20444

cve-2024-20444

Vulnerability from cvelistv5

Published

2024-10-02 16:54

Modified

2024-10-02 19:45

Severity ?

5.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L

EPSS score ?

0.65% (0.68374)

Summary

A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device.   This vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition.

References

▼	URL	Tags
	ykramarz@cisco.com	https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-raci-T46k3jnN	Vendor Advisory

Impacted products

	Vendor	Product	Version
	Cisco	Cisco Data Center Network Manager	Version: 11.2(1) Version: 7.0(2) Version: 10.3(2)IPFM Version: 10.1(1) Version: 7.2(3) Version: 7.2(2) Version: 7.2(1) Version: 11.0(1) Version: 10.4(1) Version: 10.2(1) Version: 7.2(2a) Version: 10.1(2) Version: 7.1(1) Version: 12.1(1) Version: 11.1(1) Version: 10.3(1) Version: 10.3(1)R(1) Version: 7.0(1) Version: 10.0(1) Version: 7.1(2) Version: 11.4(1) Version: 10.4(2) Version: 11.3(1) Version: 11.5(1) Version: 11.5(2) Version: 11.5(3) Version: 12.0.1a Version: 11.5(3a) Version: 12.0.2d Version: 12.0.2f Version: 11.5(4) Version: 12.1.1 Version: 12.1.1e Version: 12.1.1p Version: 12.1.2e Version: 12.1.2p Version: 12.1.3b Version: 12.2.1

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:cisco:data_center_network_manager:-:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "data_center_network_manager",
                  vendor: "cisco",
                  versions: [
                     {
                        status: "affected",
                        version: "11.2(1)",
                     },
                     {
                        status: "affected",
                        version: "7.0(2)",
                     },
                     {
                        status: "affected",
                        version: "10.3(2)IPFM",
                     },
                     {
                        status: "affected",
                        version: "10.1(1)",
                     },
                     {
                        status: "affected",
                        version: "7.2(3)",
                     },
                     {
                        status: "affected",
                        version: "7.2(2)",
                     },
                     {
                        status: "affected",
                        version: "7.2(1)",
                     },
                     {
                        status: "affected",
                        version: "11.0(1)",
                     },
                     {
                        status: "affected",
                        version: "10.4(1)",
                     },
                     {
                        status: "affected",
                        version: "10.2(1)",
                     },
                     {
                        status: "affected",
                        version: "7.2(2a)",
                     },
                     {
                        status: "affected",
                        version: "10.1(2)",
                     },
                     {
                        status: "affected",
                        version: "7.1(1)",
                     },
                     {
                        status: "affected",
                        version: "12.1(1)",
                     },
                     {
                        status: "affected",
                        version: "11.1(1)",
                     },
                     {
                        status: "affected",
                        version: "10.3(1)",
                     },
                     {
                        status: "affected",
                        version: "10.3(1)R(1)",
                     },
                     {
                        status: "affected",
                        version: "7.0(1)",
                     },
                     {
                        status: "affected",
                        version: "10.0(1)",
                     },
                     {
                        status: "affected",
                        version: "7.1(2)",
                     },
                     {
                        status: "affected",
                        version: "11.4(1)",
                     },
                     {
                        status: "affected",
                        version: "10.4(2)",
                     },
                     {
                        status: "affected",
                        version: "11.3(1)",
                     },
                     {
                        status: "affected",
                        version: "11.5(1)",
                     },
                     {
                        status: "affected",
                        version: "11.5(2)",
                     },
                     {
                        status: "affected",
                        version: "11.5(3)",
                     },
                     {
                        status: "affected",
                        version: "12.0.1a",
                     },
                     {
                        status: "affected",
                        version: "11.5(3a)",
                     },
                     {
                        status: "affected",
                        version: "12.0.2d",
                     },
                     {
                        status: "affected",
                        version: "12.0.2f",
                     },
                     {
                        status: "affected",
                        version: "11.5(4)",
                     },
                     {
                        status: "affected",
                        version: "12.1.1",
                     },
                     {
                        status: "affected",
                        version: "12.1.1e",
                     },
                     {
                        status: "affected",
                        version: "12.1.1p",
                     },
                     {
                        status: "affected",
                        version: "12.1.2e",
                     },
                     {
                        status: "affected",
                        version: "12.1.2p",
                     },
                     {
                        status: "affected",
                        version: "12.1.3b",
                     },
                     {
                        status: "affected",
                        version: "12.2.1",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-20444",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-02T19:29:46.344080Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-02T19:45:29.694Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unknown",
               product: "Cisco Data Center Network Manager",
               vendor: "Cisco",
               versions: [
                  {
                     status: "affected",
                     version: "11.2(1)",
                  },
                  {
                     status: "affected",
                     version: "7.0(2)",
                  },
                  {
                     status: "affected",
                     version: "10.3(2)IPFM",
                  },
                  {
                     status: "affected",
                     version: "10.1(1)",
                  },
                  {
                     status: "affected",
                     version: "7.2(3)",
                  },
                  {
                     status: "affected",
                     version: "7.2(2)",
                  },
                  {
                     status: "affected",
                     version: "7.2(1)",
                  },
                  {
                     status: "affected",
                     version: "11.0(1)",
                  },
                  {
                     status: "affected",
                     version: "10.4(1)",
                  },
                  {
                     status: "affected",
                     version: "10.2(1)",
                  },
                  {
                     status: "affected",
                     version: "7.2(2a)",
                  },
                  {
                     status: "affected",
                     version: "10.1(2)",
                  },
                  {
                     status: "affected",
                     version: "7.1(1)",
                  },
                  {
                     status: "affected",
                     version: "12.1(1)",
                  },
                  {
                     status: "affected",
                     version: "11.1(1)",
                  },
                  {
                     status: "affected",
                     version: "10.3(1)",
                  },
                  {
                     status: "affected",
                     version: "10.3(1)R(1)",
                  },
                  {
                     status: "affected",
                     version: "7.0(1)",
                  },
                  {
                     status: "affected",
                     version: "10.0(1)",
                  },
                  {
                     status: "affected",
                     version: "7.1(2)",
                  },
                  {
                     status: "affected",
                     version: "11.4(1)",
                  },
                  {
                     status: "affected",
                     version: "10.4(2)",
                  },
                  {
                     status: "affected",
                     version: "11.3(1)",
                  },
                  {
                     status: "affected",
                     version: "11.5(1)",
                  },
                  {
                     status: "affected",
                     version: "11.5(2)",
                  },
                  {
                     status: "affected",
                     version: "11.5(3)",
                  },
                  {
                     status: "affected",
                     version: "12.0.1a",
                  },
                  {
                     status: "affected",
                     version: "11.5(3a)",
                  },
                  {
                     status: "affected",
                     version: "12.0.2d",
                  },
                  {
                     status: "affected",
                     version: "12.0.2f",
                  },
                  {
                     status: "affected",
                     version: "11.5(4)",
                  },
                  {
                     status: "affected",
                     version: "12.1.1",
                  },
                  {
                     status: "affected",
                     version: "12.1.1e",
                  },
                  {
                     status: "affected",
                     version: "12.1.1p",
                  },
                  {
                     status: "affected",
                     version: "12.1.2e",
                  },
                  {
                     status: "affected",
                     version: "12.1.2p",
                  },
                  {
                     status: "affected",
                     version: "12.1.3b",
                  },
                  {
                     status: "affected",
                     version: "12.2.1",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device.\r\n&nbsp;\r\nThis vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition.",
            },
         ],
         exploits: [
            {
               lang: "en",
               value: "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "HIGH",
                  privilegesRequired: "HIGH",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L",
                  version: "3.1",
               },
               format: "cvssV3_1",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-88",
                     description: "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')",
                     lang: "en",
                     type: "cwe",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-10-02T16:54:09.855Z",
            orgId: "d1c1063e-7a18-46af-9102-31f8928bc633",
            shortName: "cisco",
         },
         references: [
            {
               name: "cisco-sa-ndfc-raci-T46k3jnN",
               url: "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-raci-T46k3jnN",
            },
         ],
         source: {
            advisory: "cisco-sa-ndfc-raci-T46k3jnN",
            defects: [
               "CSCwj55173",
            ],
            discovery: "INTERNAL",
         },
         title: "Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "d1c1063e-7a18-46af-9102-31f8928bc633",
      assignerShortName: "cisco",
      cveId: "CVE-2024-20444",
      datePublished: "2024-10-02T16:54:09.855Z",
      dateReserved: "2023-11-08T15:08:07.677Z",
      dateUpdated: "2024-10-02T19:45:29.694Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
   "vulnerability-lookup:meta": {
      fkie_nvd: {
         configurations: "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:nexus_dashboard_fabric_controller:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"12.2.2\", \"matchCriteriaId\": \"9E78B4AC-793B-4405-896F-31398AF7CBD2\"}]}]}]",
         descriptions: "[{\"lang\": \"en\", \"value\": \"A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device.\\r\\n&nbsp;\\r\\nThis vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition.\"}, {\"lang\": \"es\", \"value\": \"Una vulnerabilidad en Cisco Nexus Dashboard Fabric Controller (NDFC), anteriormente Cisco Data Center Network Manager (DCNM), podr\\u00eda permitir que un atacante remoto autenticado con privilegios de administrador de red realice un ataque de inyecci\\u00f3n de comandos contra un dispositivo afectado. Esta vulnerabilidad se debe a una validaci\\u00f3n insuficiente de los argumentos de los comandos. Un atacante podr\\u00eda aprovechar esta vulnerabilidad enviando argumentos de comandos manipulados a un endpoint de API REST espec\\u00edfico. Una explotaci\\u00f3n exitosa podr\\u00eda permitir al atacante sobrescribir archivos confidenciales o bloquear un contenedor espec\\u00edfico, que se reiniciar\\u00eda por s\\u00ed solo, lo que provocar\\u00eda una condici\\u00f3n de denegaci\\u00f3n de servicio (DoS) de bajo impacto.\"}]",
         id: "CVE-2024-20444",
         lastModified: "2024-10-08T15:26:38.527",
         metrics: "{\"cvssMetricV31\": [{\"source\": \"ykramarz@cisco.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"LOW\"}, \"exploitabilityScore\": 1.2, \"impactScore\": 4.2}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"LOW\"}, \"exploitabilityScore\": 1.2, \"impactScore\": 4.2}]}",
         published: "2024-10-02T17:15:16.390",
         references: "[{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-raci-T46k3jnN\", \"source\": \"ykramarz@cisco.com\", \"tags\": [\"Vendor Advisory\"]}]",
         sourceIdentifier: "ykramarz@cisco.com",
         vulnStatus: "Analyzed",
         weaknesses: "[{\"source\": \"ykramarz@cisco.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-88\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-88\"}]}]",
      },
      nvd: "{\"cve\":{\"id\":\"CVE-2024-20444\",\"sourceIdentifier\":\"ykramarz@cisco.com\",\"published\":\"2024-10-02T17:15:16.390\",\"lastModified\":\"2024-10-08T15:26:38.527\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device.\\r\\n&nbsp;\\r\\nThis vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en Cisco Nexus Dashboard Fabric Controller (NDFC), anteriormente Cisco Data Center Network Manager (DCNM), podría permitir que un atacante remoto autenticado con privilegios de administrador de red realice un ataque de inyección de comandos contra un dispositivo afectado. Esta vulnerabilidad se debe a una validación insuficiente de los argumentos de los comandos. Un atacante podría aprovechar esta vulnerabilidad enviando argumentos de comandos manipulados a un endpoint de API REST específico. Una explotación exitosa podría permitir al atacante sobrescribir archivos confidenciales o bloquear un contenedor específico, que se reiniciaría por sí solo, lo que provocaría una condición de denegación de servicio (DoS) de bajo impacto.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"ykramarz@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":1.2,\"impactScore\":4.2},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":1.2,\"impactScore\":4.2}]},\"weaknesses\":[{\"source\":\"ykramarz@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-88\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-88\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:nexus_dashboard_fabric_controller:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"12.2.2\",\"matchCriteriaId\":\"9E78B4AC-793B-4405-896F-31398AF7CBD2\"}]}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-raci-T46k3jnN\",\"source\":\"ykramarz@cisco.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
      vulnrichment: {
         containers: "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-20444\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-02T19:29:46.344080Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:cisco:data_center_network_manager:-:*:*:*:*:*:*:*\"], \"vendor\": \"cisco\", \"product\": \"data_center_network_manager\", \"versions\": [{\"status\": \"affected\", \"version\": \"11.2(1)\"}, {\"status\": \"affected\", \"version\": \"7.0(2)\"}, {\"status\": \"affected\", \"version\": \"10.3(2)IPFM\"}, {\"status\": \"affected\", \"version\": \"10.1(1)\"}, {\"status\": \"affected\", \"version\": \"7.2(3)\"}, {\"status\": \"affected\", \"version\": \"7.2(2)\"}, {\"status\": \"affected\", \"version\": \"7.2(1)\"}, {\"status\": \"affected\", \"version\": \"11.0(1)\"}, {\"status\": \"affected\", \"version\": \"10.4(1)\"}, {\"status\": \"affected\", \"version\": \"10.2(1)\"}, {\"status\": \"affected\", \"version\": \"7.2(2a)\"}, {\"status\": \"affected\", \"version\": \"10.1(2)\"}, {\"status\": \"affected\", \"version\": \"7.1(1)\"}, {\"status\": \"affected\", \"version\": \"12.1(1)\"}, {\"status\": \"affected\", \"version\": \"11.1(1)\"}, {\"status\": \"affected\", \"version\": \"10.3(1)\"}, {\"status\": \"affected\", \"version\": \"10.3(1)R(1)\"}, {\"status\": \"affected\", \"version\": \"7.0(1)\"}, {\"status\": \"affected\", \"version\": \"10.0(1)\"}, {\"status\": \"affected\", \"version\": \"7.1(2)\"}, {\"status\": \"affected\", \"version\": \"11.4(1)\"}, {\"status\": \"affected\", \"version\": \"10.4(2)\"}, {\"status\": \"affected\", \"version\": \"11.3(1)\"}, {\"status\": \"affected\", \"version\": \"11.5(1)\"}, {\"status\": \"affected\", \"version\": \"11.5(2)\"}, {\"status\": \"affected\", \"version\": \"11.5(3)\"}, {\"status\": \"affected\", \"version\": \"12.0.1a\"}, {\"status\": \"affected\", \"version\": \"11.5(3a)\"}, {\"status\": \"affected\", \"version\": \"12.0.2d\"}, {\"status\": \"affected\", \"version\": \"12.0.2f\"}, {\"status\": \"affected\", \"version\": \"11.5(4)\"}, {\"status\": \"affected\", \"version\": \"12.1.1\"}, {\"status\": \"affected\", \"version\": \"12.1.1e\"}, {\"status\": \"affected\", \"version\": \"12.1.1p\"}, {\"status\": \"affected\", \"version\": \"12.1.2e\"}, {\"status\": \"affected\", \"version\": \"12.1.2p\"}, {\"status\": \"affected\", \"version\": \"12.1.3b\"}, {\"status\": \"affected\", \"version\": \"12.2.1\"}], \"defaultStatus\": \"unknown\"}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-02T19:45:21.317Z\"}}], \"cna\": {\"title\": \"Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability\", \"source\": {\"defects\": [\"CSCwj55173\"], \"advisory\": \"cisco-sa-ndfc-raci-T46k3jnN\", \"discovery\": \"INTERNAL\"}, \"metrics\": [{\"format\": \"cvssV3_1\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"Cisco\", \"product\": \"Cisco Data Center Network Manager\", \"versions\": [{\"status\": \"affected\", \"version\": \"11.2(1)\"}, {\"status\": \"affected\", \"version\": \"7.0(2)\"}, {\"status\": \"affected\", \"version\": \"10.3(2)IPFM\"}, {\"status\": \"affected\", \"version\": \"10.1(1)\"}, {\"status\": \"affected\", \"version\": \"7.2(3)\"}, {\"status\": \"affected\", \"version\": \"7.2(2)\"}, {\"status\": \"affected\", \"version\": \"7.2(1)\"}, {\"status\": \"affected\", \"version\": \"11.0(1)\"}, {\"status\": \"affected\", \"version\": \"10.4(1)\"}, {\"status\": \"affected\", \"version\": \"10.2(1)\"}, {\"status\": \"affected\", \"version\": \"7.2(2a)\"}, {\"status\": \"affected\", \"version\": \"10.1(2)\"}, {\"status\": \"affected\", \"version\": \"7.1(1)\"}, {\"status\": \"affected\", \"version\": \"12.1(1)\"}, {\"status\": \"affected\", \"version\": \"11.1(1)\"}, {\"status\": \"affected\", \"version\": \"10.3(1)\"}, {\"status\": \"affected\", \"version\": \"10.3(1)R(1)\"}, {\"status\": \"affected\", \"version\": \"7.0(1)\"}, {\"status\": \"affected\", \"version\": \"10.0(1)\"}, {\"status\": \"affected\", \"version\": \"7.1(2)\"}, {\"status\": \"affected\", \"version\": \"11.4(1)\"}, {\"status\": \"affected\", \"version\": \"10.4(2)\"}, {\"status\": \"affected\", \"version\": \"11.3(1)\"}, {\"status\": \"affected\", \"version\": \"11.5(1)\"}, {\"status\": \"affected\", \"version\": \"11.5(2)\"}, {\"status\": \"affected\", \"version\": \"11.5(3)\"}, {\"status\": \"affected\", \"version\": \"12.0.1a\"}, {\"status\": \"affected\", \"version\": \"11.5(3a)\"}, {\"status\": \"affected\", \"version\": \"12.0.2d\"}, {\"status\": \"affected\", \"version\": \"12.0.2f\"}, {\"status\": \"affected\", \"version\": \"11.5(4)\"}, {\"status\": \"affected\", \"version\": \"12.1.1\"}, {\"status\": \"affected\", \"version\": \"12.1.1e\"}, {\"status\": \"affected\", \"version\": \"12.1.1p\"}, {\"status\": \"affected\", \"version\": \"12.1.2e\"}, {\"status\": \"affected\", \"version\": \"12.1.2p\"}, {\"status\": \"affected\", \"version\": \"12.1.3b\"}, {\"status\": \"affected\", \"version\": \"12.2.1\"}], \"defaultStatus\": \"unknown\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\"}], \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-raci-T46k3jnN\", \"name\": \"cisco-sa-ndfc-raci-T46k3jnN\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device.\\r\\n&nbsp;\\r\\nThis vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"cwe\", \"cweId\": \"CWE-88\", \"description\": \"Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')\"}]}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2024-10-02T16:54:09.855Z\"}}}",
         cveMetadata: "{\"cveId\": \"CVE-2024-20444\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-10-02T19:45:29.694Z\", \"dateReserved\": \"2023-11-08T15:08:07.677Z\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"datePublished\": \"2024-10-02T16:54:09.855Z\", \"assignerShortName\": \"cisco\"}",
         dataType: "CVE_RECORD",
         dataVersion: "5.1",
      },
   },
}

gsd-2024-20444

Vulnerability from gsd

Modified

2023-12-13 01:21

Details

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Aliases

CVE-2024-20444

Aliases

CVE-2024-20444

JSON

To clipboard

{
   GSD: {
      alias: "CVE-2024-20444",
      id: "GSD-2024-20444",
   },
   gsd: {
      metadata: {
         exploitCode: "unknown",
         remediation: "unknown",
         reportConfidence: "confirmed",
         type: "vulnerability",
      },
      osvSchema: {
         aliases: [
            "CVE-2024-20444",
         ],
         id: "GSD-2024-20444",
         modified: "2023-12-13T01:21:43.144022Z",
         schema_version: "1.4.0",
      },
   },
   namespaces: {
      "cve.org": {
         CVE_data_meta: {
            ASSIGNER: "cve@mitre.org",
            ID: "CVE-2024-20444",
            STATE: "RESERVED",
         },
         data_format: "MITRE",
         data_type: "CVE",
         data_version: "4.0",
         description: {
            description_data: [
               {
                  lang: "eng",
                  value: "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.",
               },
            ],
         },
      },
   },
}

cisco-sa-ndfc-raci-T46k3jnN

Vulnerability from csaf_cisco

Published

2024-10-02 16:00

Modified

2024-10-02 16:00

Summary

Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability

Notes

Summary

A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device. This vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Vulnerable Products

At the time of publication, this vulnerability affected Cisco NDFC, regardless of device configuration. Note: Cisco NDFC releases 11.5 and earlier were known as Cisco DCNM. Note: Starting with Cisco Nexus Dashboard Release 3.1(1k), Cisco NDFC is distributed in Cisco Nexus Dashboard unified releases. For information about which Cisco software releases were vulnerable at the time of publication, see the Fixed Software ["#fs"] section of this advisory. See the Details section in the bug ID at the top of this advisory for the most complete and current information.

Products Confirmed Not Vulnerable

Only products listed in the Vulnerable Products ["#vp"] section of this advisory are known to be affected by this vulnerability. Cisco has confirmed that this vulnerability does not affect the following Cisco products: Nexus Dashboard Insights Nexus Dashboard Orchestrator (NDO)

Workarounds

There are no workarounds that address this vulnerability.

Fixed Software

When considering software upgrades ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"], customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories page ["https://www.cisco.com/go/psirt"], to determine exposure and a complete upgrade solution. In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers. Fixed Releases At the time of publication, the release information in the following table was accurate. See the Details section in the bug ID at the top of this advisory for the most complete and current information. The left column lists Cisco software releases, and the right column indicates whether a release was affected by the vulnerability that is described in this advisory and which release included the fix for this vulnerability. Cisco NDFC Release First Fixed Release 11.5 and earlier1 Migrate to a fixed release. 12.0 12.2.2 1. Cisco NDFC releases 11.5 and earlier were known as Cisco DCNM. Note: Starting with Cisco Nexus Dashboard Release 3.1(1k), Cisco NDFC is distributed in Cisco Nexus Dashboard unified releases. Cisco Nexus Dashboard Release 3.2(1e) includes Cisco NDFC Release 12.2.2. The Cisco Product Security Incident Response Team (PSIRT) validates only the affected and fixed release information that is documented in this advisory.

Vulnerability Policy

To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy ["http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.

Exploitation and Public Announcements

The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.

Source

This vulnerability was found during internal security testing by Rohan Rao of the Cisco Advanced Security Initiatives Group (ASIG).

Legal Disclaimer

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME. A standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.

JSON

To clipboard

{
   document: {
      acknowledgments: [
         {
            summary: "This vulnerability was found during internal security testing by Rohan Rao of the Cisco Advanced Security Initiatives Group (ASIG).",
         },
      ],
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      notes: [
         {
            category: "summary",
            text: "A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition.\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\n",
            title: "Summary",
         },
         {
            category: "general",
            text: "At the time of publication, this vulnerability affected Cisco NDFC, regardless of device configuration.\r\n\r\nNote: Cisco NDFC releases 11.5 and earlier were known as Cisco DCNM.\r\n\r\nNote: Starting with Cisco Nexus Dashboard Release 3.1(1k), Cisco NDFC is distributed in Cisco Nexus Dashboard unified releases.\r\n\r\nFor information about which Cisco software releases were vulnerable at the time of publication, see the Fixed Software [\"#fs\"] section of this advisory. See the Details section in the bug ID at the top of this advisory for the most complete and current information.",
            title: "Vulnerable Products",
         },
         {
            category: "general",
            text: "Only products listed in the Vulnerable Products [\"#vp\"] section of this advisory are known to be affected by this vulnerability.\r\n\r\nCisco has confirmed that this vulnerability does not affect the following Cisco products:\r\n\r\nNexus Dashboard Insights\r\nNexus Dashboard Orchestrator (NDO)",
            title: "Products Confirmed Not Vulnerable",
         },
         {
            category: "general",
            text: "There are no workarounds that address this vulnerability.",
            title: "Workarounds",
         },
         {
            category: "general",
            text: "When considering software upgrades [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"], customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories page [\"https://www.cisco.com/go/psirt\"], to determine exposure and a complete upgrade solution.\r\n\r\nIn all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers.\r\n      Fixed Releases\r\nAt the time of publication, the release information in the following table was accurate. See the Details section in the bug ID at the top of this advisory for the most complete and current information.\r\n\r\nThe left column lists Cisco software releases, and the right column indicates whether a release was affected by the vulnerability that is described in this advisory and which release included the fix for this vulnerability.\r\n        Cisco NDFC Release  First Fixed Release          11.5 and earlier1  Migrate to a fixed release.      12.0  12.2.2\r\n1. Cisco NDFC releases 11.5 and earlier were known as Cisco DCNM.\r\nNote: Starting with Cisco Nexus Dashboard Release 3.1(1k), Cisco NDFC is distributed in Cisco Nexus Dashboard unified releases. Cisco Nexus Dashboard Release 3.2(1e) includes Cisco NDFC Release 12.2.2.\r\n\r\nThe Cisco Product Security Incident Response Team (PSIRT) validates only the affected and fixed release information that is documented in this advisory.",
            title: "Fixed Software",
         },
         {
            category: "general",
            text: "To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy [\"http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html\"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.",
            title: "Vulnerability Policy",
         },
         {
            category: "general",
            text: "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.",
            title: "Exploitation and Public Announcements",
         },
         {
            category: "general",
            text: "This vulnerability was found during internal security testing by Rohan Rao of the Cisco Advanced Security Initiatives Group (ASIG).",
            title: "Source",
         },
         {
            category: "legal_disclaimer",
            text: "THIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.\r\n\r\nA standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.",
            title: "Legal Disclaimer",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "psirt@cisco.com",
         issuing_authority: "Cisco PSIRT",
         name: "Cisco",
         namespace: "https://wwww.cisco.com",
      },
      references: [
         {
            category: "self",
            summary: "Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability",
            url: "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-raci-T46k3jnN",
         },
         {
            category: "external",
            summary: "Cisco Security Vulnerability Policy",
            url: "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html",
         },
         {
            category: "external",
            summary: "considering software upgrades",
            url: "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes",
         },
         {
            category: "external",
            summary: "Cisco Security Advisories page",
            url: "https://www.cisco.com/go/psirt",
         },
         {
            category: "external",
            summary: "Security Vulnerability Policy",
            url: "http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html",
         },
      ],
      title: "Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability",
      tracking: {
         current_release_date: "2024-10-02T16:00:00+00:00",
         generator: {
            date: "2024-10-02T15:56:35+00:00",
            engine: {
               name: "TVCE",
            },
         },
         id: "cisco-sa-ndfc-raci-T46k3jnN",
         initial_release_date: "2024-10-02T16:00:00+00:00",
         revision_history: [
            {
               date: "2024-10-02T15:55:59+00:00",
               number: "1.0.0",
               summary: "Initial public release.",
            },
         ],
         status: "final",
         version: "1.0.0",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  category: "product_family",
                  name: "Cisco Data Center Network Manager",
                  product: {
                     name: "Cisco Data Center Network Manager ",
                     product_id: "CSAFPID-233075",
                  },
               },
            ],
            category: "vendor",
            name: "Cisco",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2024-20444",
         ids: [
            {
               system_name: "Cisco Bug ID",
               text: "CSCwj55173",
            },
         ],
         notes: [
            {
               category: "other",
               text: "Complete.",
               title: "Affected Product Comprehensiveness",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-233075",
            ],
         },
         release_date: "2024-10-02T16:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               details: "Cisco has released software updates that address this vulnerability.",
               product_ids: [
                  "CSAFPID-233075",
               ],
               url: "https://software.cisco.com",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-233075",
               ],
            },
         ],
         title: "Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability",
      },
   ],
}

cisco-sa-ndfc-raci-t46k3jnn

Vulnerability from csaf_cisco

Published

2024-10-02 16:00

Modified

2024-10-02 16:00

Summary

Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability

Notes

Summary

A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device. This vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Vulnerable Products

Products Confirmed Not Vulnerable

Workarounds

There are no workarounds that address this vulnerability.

Fixed Software

Vulnerability Policy

Exploitation and Public Announcements

The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.

Source

This vulnerability was found during internal security testing by Rohan Rao of the Cisco Advanced Security Initiatives Group (ASIG).

Legal Disclaimer

JSON

To clipboard

{
   document: {
      acknowledgments: [
         {
            summary: "This vulnerability was found during internal security testing by Rohan Rao of the Cisco Advanced Security Initiatives Group (ASIG).",
         },
      ],
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      notes: [
         {
            category: "summary",
            text: "A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition.\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\n",
            title: "Summary",
         },
         {
            category: "general",
            text: "At the time of publication, this vulnerability affected Cisco NDFC, regardless of device configuration.\r\n\r\nNote: Cisco NDFC releases 11.5 and earlier were known as Cisco DCNM.\r\n\r\nNote: Starting with Cisco Nexus Dashboard Release 3.1(1k), Cisco NDFC is distributed in Cisco Nexus Dashboard unified releases.\r\n\r\nFor information about which Cisco software releases were vulnerable at the time of publication, see the Fixed Software [\"#fs\"] section of this advisory. See the Details section in the bug ID at the top of this advisory for the most complete and current information.",
            title: "Vulnerable Products",
         },
         {
            category: "general",
            text: "Only products listed in the Vulnerable Products [\"#vp\"] section of this advisory are known to be affected by this vulnerability.\r\n\r\nCisco has confirmed that this vulnerability does not affect the following Cisco products:\r\n\r\nNexus Dashboard Insights\r\nNexus Dashboard Orchestrator (NDO)",
            title: "Products Confirmed Not Vulnerable",
         },
         {
            category: "general",
            text: "There are no workarounds that address this vulnerability.",
            title: "Workarounds",
         },
         {
            category: "general",
            text: "When considering software upgrades [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"], customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories page [\"https://www.cisco.com/go/psirt\"], to determine exposure and a complete upgrade solution.\r\n\r\nIn all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers.\r\n      Fixed Releases\r\nAt the time of publication, the release information in the following table was accurate. See the Details section in the bug ID at the top of this advisory for the most complete and current information.\r\n\r\nThe left column lists Cisco software releases, and the right column indicates whether a release was affected by the vulnerability that is described in this advisory and which release included the fix for this vulnerability.\r\n        Cisco NDFC Release  First Fixed Release          11.5 and earlier1  Migrate to a fixed release.      12.0  12.2.2\r\n1. Cisco NDFC releases 11.5 and earlier were known as Cisco DCNM.\r\nNote: Starting with Cisco Nexus Dashboard Release 3.1(1k), Cisco NDFC is distributed in Cisco Nexus Dashboard unified releases. Cisco Nexus Dashboard Release 3.2(1e) includes Cisco NDFC Release 12.2.2.\r\n\r\nThe Cisco Product Security Incident Response Team (PSIRT) validates only the affected and fixed release information that is documented in this advisory.",
            title: "Fixed Software",
         },
         {
            category: "general",
            text: "To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy [\"http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html\"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.",
            title: "Vulnerability Policy",
         },
         {
            category: "general",
            text: "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.",
            title: "Exploitation and Public Announcements",
         },
         {
            category: "general",
            text: "This vulnerability was found during internal security testing by Rohan Rao of the Cisco Advanced Security Initiatives Group (ASIG).",
            title: "Source",
         },
         {
            category: "legal_disclaimer",
            text: "THIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.\r\n\r\nA standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.",
            title: "Legal Disclaimer",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "psirt@cisco.com",
         issuing_authority: "Cisco PSIRT",
         name: "Cisco",
         namespace: "https://wwww.cisco.com",
      },
      references: [
         {
            category: "self",
            summary: "Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability",
            url: "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-raci-T46k3jnN",
         },
         {
            category: "external",
            summary: "Cisco Security Vulnerability Policy",
            url: "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html",
         },
         {
            category: "external",
            summary: "considering software upgrades",
            url: "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes",
         },
         {
            category: "external",
            summary: "Cisco Security Advisories page",
            url: "https://www.cisco.com/go/psirt",
         },
         {
            category: "external",
            summary: "Security Vulnerability Policy",
            url: "http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html",
         },
      ],
      title: "Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability",
      tracking: {
         current_release_date: "2024-10-02T16:00:00+00:00",
         generator: {
            date: "2024-10-02T15:56:35+00:00",
            engine: {
               name: "TVCE",
            },
         },
         id: "cisco-sa-ndfc-raci-T46k3jnN",
         initial_release_date: "2024-10-02T16:00:00+00:00",
         revision_history: [
            {
               date: "2024-10-02T15:55:59+00:00",
               number: "1.0.0",
               summary: "Initial public release.",
            },
         ],
         status: "final",
         version: "1.0.0",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  category: "product_family",
                  name: "Cisco Data Center Network Manager",
                  product: {
                     name: "Cisco Data Center Network Manager ",
                     product_id: "CSAFPID-233075",
                  },
               },
            ],
            category: "vendor",
            name: "Cisco",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2024-20444",
         ids: [
            {
               system_name: "Cisco Bug ID",
               text: "CSCwj55173",
            },
         ],
         notes: [
            {
               category: "other",
               text: "Complete.",
               title: "Affected Product Comprehensiveness",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-233075",
            ],
         },
         release_date: "2024-10-02T16:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               details: "Cisco has released software updates that address this vulnerability.",
               product_ids: [
                  "CSAFPID-233075",
               ],
               url: "https://software.cisco.com",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-233075",
               ],
            },
         ],
         title: "Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability",
      },
   ],
}

ghsa-rvwm-3c9j-xm8h

Vulnerability from github

Published

2024-10-02 18:31

Modified

2024-10-02 18:31

Severity ?

5.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L

Details

A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device. This vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition.

Show details on source website

JSON

To clipboard

{
   affected: [],
   aliases: [
      "CVE-2024-20444",
   ],
   database_specific: {
      cwe_ids: [
         "CWE-88",
      ],
      github_reviewed: false,
      github_reviewed_at: null,
      nvd_published_at: "2024-10-02T17:15:16Z",
      severity: "MODERATE",
   },
   details: "A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device.\n&nbsp;\nThis vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition.",
   id: "GHSA-rvwm-3c9j-xm8h",
   modified: "2024-10-02T18:31:33Z",
   published: "2024-10-02T18:31:32Z",
   references: [
      {
         type: "ADVISORY",
         url: "https://nvd.nist.gov/vuln/detail/CVE-2024-20444",
      },
      {
         type: "WEB",
         url: "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-raci-T46k3jnN",
      },
   ],
   schema_version: "1.4.0",
   severity: [
      {
         score: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L",
         type: "CVSS_V3",
      },
   ],
}

wid-sec-w-2024-3072

Vulnerability from csaf_certbund

Published

2024-10-03 22:00

Modified

2024-10-03 22:00

Summary

Cisco Nexus Dashboard und Nexus Dashboard Fabric Controller: Mehrere Schwachstellen

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung

Cisco Nexus Dashboard ist ein Dashboard für Rechenzentren zur Verwaltung von Hybrid-Cloud-Netzwerken.

Angriff

Ein entfernter Angreifer kann mehrere Schwachstellen in Cisco Nexus Dashboard ausnutzen, um Informationen offenzulegen Sicherheitsmaßnahmen zu umgehen und beliebigen Code, im schlimmsten Fall mit Administratorrechten, zur Ausführung zu bringen.

Betroffene Betriebssysteme

- Sonstiges

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         text: "hoch",
      },
      category: "csaf_base",
      csaf_version: "2.0",
      distribution: {
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "de-DE",
      notes: [
         {
            category: "legal_disclaimer",
            text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.",
         },
         {
            category: "description",
            text: "Cisco Nexus Dashboard ist ein Dashboard für Rechenzentren zur Verwaltung von Hybrid-Cloud-Netzwerken.",
            title: "Produktbeschreibung",
         },
         {
            category: "summary",
            text: "Ein entfernter Angreifer kann mehrere Schwachstellen in Cisco Nexus Dashboard ausnutzen, um Informationen offenzulegen Sicherheitsmaßnahmen zu umgehen und beliebigen Code, im schlimmsten Fall mit Administratorrechten, zur Ausführung zu bringen.",
            title: "Angriff",
         },
         {
            category: "general",
            text: "- Sonstiges",
            title: "Betroffene Betriebssysteme",
         },
      ],
      publisher: {
         category: "other",
         contact_details: "csaf-provider@cert-bund.de",
         name: "Bundesamt für Sicherheit in der Informationstechnik",
         namespace: "https://www.bsi.bund.de",
      },
      references: [
         {
            category: "self",
            summary: "WID-SEC-W-2024-3072 - CSAF Version",
            url: "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3072.json",
         },
         {
            category: "self",
            summary: "WID-SEC-2024-3072 - Portal Version",
            url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3072",
         },
         {
            category: "external",
            summary: "Cisco Security Advisory cisco-sa-ndfc-cmdinj-UvYZrKfr vom 2024-10-03",
            url: "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-cmdinj-UvYZrKfr",
         },
         {
            category: "external",
            summary: "Cisco Security Advisory cisco-sa-ndfc-raci-T46k3jnN vom 2024-10-03",
            url: "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-raci-T46k3jnN",
         },
         {
            category: "external",
            summary: "Cisco Security Advisory cisco-sa-ndfc-cidv-XvyX2wLj vom 2024-10-03",
            url: "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-cidv-XvyX2wLj",
         },
         {
            category: "external",
            summary: "Cisco Security Advisory cisco-sa-ndfc-ptrce-BUSHLbp vom 2024-10-03",
            url: "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-ptrce-BUSHLbp",
         },
         {
            category: "external",
            summary: "Cisco Security Advisory cisco-sa-ndhs-uaapi-Jh4V6zpN vom 2024-10-03",
            url: "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndhs-uaapi-Jh4V6zpN",
         },
         {
            category: "external",
            summary: "Cisco Security Advisory cisco-sa-ndhs-idv-Bk8VqEDc vom 2024-10-03",
            url: "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndhs-idv-Bk8VqEDc",
         },
         {
            category: "external",
            summary: "Cisco Security Advisory cisco-sa-ndo-tlsvld-FdUF3cpw vom 2024-10-03",
            url: "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndo-tlsvld-FdUF3cpw",
         },
      ],
      source_lang: "en-US",
      title: "Cisco Nexus Dashboard und Nexus Dashboard Fabric Controller: Mehrere Schwachstellen",
      tracking: {
         current_release_date: "2024-10-03T22:00:00.000+00:00",
         generator: {
            date: "2024-10-04T11:09:27.025+00:00",
            engine: {
               name: "BSI-WID",
               version: "1.3.8",
            },
         },
         id: "WID-SEC-W-2024-3072",
         initial_release_date: "2024-10-03T22:00:00.000+00:00",
         revision_history: [
            {
               date: "2024-10-03T22:00:00.000+00:00",
               number: "1",
               summary: "Initiale Fassung",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version_range",
                        name: "<12.2.2",
                        product: {
                           name: "Cisco Nexus Dashboard <12.2.2",
                           product_id: "T037977",
                        },
                     },
                     {
                        category: "product_version",
                        name: "12.2.2",
                        product: {
                           name: "Cisco Nexus Dashboard 12.2.2",
                           product_id: "T037977-fixed",
                           product_identification_helper: {
                              cpe: "cpe:/a:cisco:nexus_dashboard:12.2.2",
                           },
                        },
                     },
                     {
                        category: "product_version_range",
                        name: ">=12.0",
                        product: {
                           name: "Cisco Nexus Dashboard >=12.0",
                           product_id: "T037979",
                        },
                     },
                     {
                        category: "product_version_range",
                        name: ">=12.0",
                        product: {
                           name: "Cisco Nexus Dashboard >=12.0",
                           product_id: "T037979-fixed",
                        },
                     },
                  ],
                  category: "product_name",
                  name: "Nexus Dashboard",
               },
            ],
            category: "vendor",
            name: "Cisco",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2024-20385",
         notes: [
            {
               category: "description",
               text: "In Cisco Nexus Dashboard und dem Nexus Dashboard Fabric Controller existieren mehrere Schwachstellen. Diese bestehen unter anderem aufgrund von unzureichenden Überprüfungen von Autorisierungen und Befehlsargumenten, sowie unsachgemäßer Speicherung von Informationen. Ein Angreifer kann diese Schwachstellen ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und beliebigen Code, im schlimmsten Fall mit Administratorrechten, zur Ausführung zu bringen. Zur Ausnutzung einiger dieser Schwachstellen ist eine Authentisierung erforderlich.",
            },
         ],
         product_status: {
            known_affected: [
               "T037977",
            ],
         },
         release_date: "2024-10-03T22:00:00.000+00:00",
         title: "CVE-2024-20385",
      },
      {
         cve: "CVE-2024-20432",
         notes: [
            {
               category: "description",
               text: "In Cisco Nexus Dashboard und dem Nexus Dashboard Fabric Controller existieren mehrere Schwachstellen. Diese bestehen unter anderem aufgrund von unzureichenden Überprüfungen von Autorisierungen und Befehlsargumenten, sowie unsachgemäßer Speicherung von Informationen. Ein Angreifer kann diese Schwachstellen ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und beliebigen Code, im schlimmsten Fall mit Administratorrechten, zur Ausführung zu bringen. Zur Ausnutzung einiger dieser Schwachstellen ist eine Authentisierung erforderlich.",
            },
         ],
         product_status: {
            known_affected: [
               "T037977",
            ],
         },
         release_date: "2024-10-03T22:00:00.000+00:00",
         title: "CVE-2024-20432",
      },
      {
         cve: "CVE-2024-20438",
         notes: [
            {
               category: "description",
               text: "In Cisco Nexus Dashboard und dem Nexus Dashboard Fabric Controller existieren mehrere Schwachstellen. Diese bestehen unter anderem aufgrund von unzureichenden Überprüfungen von Autorisierungen und Befehlsargumenten, sowie unsachgemäßer Speicherung von Informationen. Ein Angreifer kann diese Schwachstellen ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und beliebigen Code, im schlimmsten Fall mit Administratorrechten, zur Ausführung zu bringen. Zur Ausnutzung einiger dieser Schwachstellen ist eine Authentisierung erforderlich.",
            },
         ],
         product_status: {
            known_affected: [
               "T037977",
            ],
         },
         release_date: "2024-10-03T22:00:00.000+00:00",
         title: "CVE-2024-20438",
      },
      {
         cve: "CVE-2024-20441",
         notes: [
            {
               category: "description",
               text: "In Cisco Nexus Dashboard und dem Nexus Dashboard Fabric Controller existieren mehrere Schwachstellen. Diese bestehen unter anderem aufgrund von unzureichenden Überprüfungen von Autorisierungen und Befehlsargumenten, sowie unsachgemäßer Speicherung von Informationen. Ein Angreifer kann diese Schwachstellen ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und beliebigen Code, im schlimmsten Fall mit Administratorrechten, zur Ausführung zu bringen. Zur Ausnutzung einiger dieser Schwachstellen ist eine Authentisierung erforderlich.",
            },
         ],
         product_status: {
            known_affected: [
               "T037977",
            ],
         },
         release_date: "2024-10-03T22:00:00.000+00:00",
         title: "CVE-2024-20441",
      },
      {
         cve: "CVE-2024-20442",
         notes: [
            {
               category: "description",
               text: "In Cisco Nexus Dashboard und dem Nexus Dashboard Fabric Controller existieren mehrere Schwachstellen. Diese bestehen unter anderem aufgrund von unzureichenden Überprüfungen von Autorisierungen und Befehlsargumenten, sowie unsachgemäßer Speicherung von Informationen. Ein Angreifer kann diese Schwachstellen ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und beliebigen Code, im schlimmsten Fall mit Administratorrechten, zur Ausführung zu bringen. Zur Ausnutzung einiger dieser Schwachstellen ist eine Authentisierung erforderlich.",
            },
         ],
         product_status: {
            known_affected: [
               "T037977",
            ],
         },
         release_date: "2024-10-03T22:00:00.000+00:00",
         title: "CVE-2024-20442",
      },
      {
         cve: "CVE-2024-20444",
         notes: [
            {
               category: "description",
               text: "In Cisco Nexus Dashboard und dem Nexus Dashboard Fabric Controller existieren mehrere Schwachstellen. Diese bestehen unter anderem aufgrund von unzureichenden Überprüfungen von Autorisierungen und Befehlsargumenten, sowie unsachgemäßer Speicherung von Informationen. Ein Angreifer kann diese Schwachstellen ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und beliebigen Code, im schlimmsten Fall mit Administratorrechten, zur Ausführung zu bringen. Zur Ausnutzung einiger dieser Schwachstellen ist eine Authentisierung erforderlich.",
            },
         ],
         product_status: {
            known_affected: [
               "T037977",
            ],
         },
         release_date: "2024-10-03T22:00:00.000+00:00",
         title: "CVE-2024-20444",
      },
      {
         cve: "CVE-2024-20448",
         notes: [
            {
               category: "description",
               text: "In Cisco Nexus Dashboard und dem Nexus Dashboard Fabric Controller existieren mehrere Schwachstellen. Diese bestehen unter anderem aufgrund von unzureichenden Überprüfungen von Autorisierungen und Befehlsargumenten, sowie unsachgemäßer Speicherung von Informationen. Ein Angreifer kann diese Schwachstellen ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und beliebigen Code, im schlimmsten Fall mit Administratorrechten, zur Ausführung zu bringen. Zur Ausnutzung einiger dieser Schwachstellen ist eine Authentisierung erforderlich.",
            },
         ],
         product_status: {
            known_affected: [
               "T037977",
            ],
         },
         release_date: "2024-10-03T22:00:00.000+00:00",
         title: "CVE-2024-20448",
      },
      {
         cve: "CVE-2024-20449",
         notes: [
            {
               category: "description",
               text: "In Cisco Nexus Dashboard und dem Nexus Dashboard Fabric Controller existieren mehrere Schwachstellen. Diese bestehen unter anderem aufgrund von unzureichenden Überprüfungen von Autorisierungen und Befehlsargumenten, sowie unsachgemäßer Speicherung von Informationen. Ein Angreifer kann diese Schwachstellen ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und beliebigen Code, im schlimmsten Fall mit Administratorrechten, zur Ausführung zu bringen. Zur Ausnutzung einiger dieser Schwachstellen ist eine Authentisierung erforderlich.",
            },
         ],
         product_status: {
            known_affected: [
               "T037977",
            ],
         },
         release_date: "2024-10-03T22:00:00.000+00:00",
         title: "CVE-2024-20449",
      },
      {
         cve: "CVE-2024-20477",
         notes: [
            {
               category: "description",
               text: "In Cisco Nexus Dashboard und dem Nexus Dashboard Fabric Controller existieren mehrere Schwachstellen. Diese bestehen unter anderem aufgrund von unzureichenden Überprüfungen von Autorisierungen und Befehlsargumenten, sowie unsachgemäßer Speicherung von Informationen. Ein Angreifer kann diese Schwachstellen ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und beliebigen Code, im schlimmsten Fall mit Administratorrechten, zur Ausführung zu bringen. Zur Ausnutzung einiger dieser Schwachstellen ist eine Authentisierung erforderlich.",
            },
         ],
         product_status: {
            known_affected: [
               "T037977",
            ],
         },
         release_date: "2024-10-03T22:00:00.000+00:00",
         title: "CVE-2024-20477",
      },
      {
         cve: "CVE-2024-20490",
         notes: [
            {
               category: "description",
               text: "In Cisco Nexus Dashboard und dem Nexus Dashboard Fabric Controller existieren mehrere Schwachstellen. Diese bestehen unter anderem aufgrund von unzureichenden Überprüfungen von Autorisierungen und Befehlsargumenten, sowie unsachgemäßer Speicherung von Informationen. Ein Angreifer kann diese Schwachstellen ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und beliebigen Code, im schlimmsten Fall mit Administratorrechten, zur Ausführung zu bringen. Zur Ausnutzung einiger dieser Schwachstellen ist eine Authentisierung erforderlich.",
            },
         ],
         product_status: {
            known_affected: [
               "T037977",
            ],
         },
         release_date: "2024-10-03T22:00:00.000+00:00",
         title: "CVE-2024-20490",
      },
      {
         cve: "CVE-2024-20491",
         notes: [
            {
               category: "description",
               text: "In Cisco Nexus Dashboard und dem Nexus Dashboard Fabric Controller existieren mehrere Schwachstellen. Diese bestehen unter anderem aufgrund von unzureichenden Überprüfungen von Autorisierungen und Befehlsargumenten, sowie unsachgemäßer Speicherung von Informationen. Ein Angreifer kann diese Schwachstellen ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und beliebigen Code, im schlimmsten Fall mit Administratorrechten, zur Ausführung zu bringen. Zur Ausnutzung einiger dieser Schwachstellen ist eine Authentisierung erforderlich.",
            },
         ],
         product_status: {
            known_affected: [
               "T037977",
            ],
         },
         release_date: "2024-10-03T22:00:00.000+00:00",
         title: "CVE-2024-20491",
      },
   ],
}

fkie_cve-2024-20444

Vulnerability from fkie_nvd

Published

2024-10-02 17:15

Modified

2024-10-08 15:26

Severity ?

5.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L
5.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L

Summary

References

▼	URL	Tags
	psirt@cisco.com	https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-raci-T46k3jnN	Vendor Advisory

Impacted products

	Vendor	Product	Version
	cisco	nexus_dashboard_fabric_controller	*

JSON

To clipboard

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:cisco:nexus_dashboard_fabric_controller:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "9E78B4AC-793B-4405-896F-31398AF7CBD2",
                     versionEndExcluding: "12.2.2",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device.\r\n&nbsp;\r\nThis vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition.",
      },
      {
         lang: "es",
         value: "Una vulnerabilidad en Cisco Nexus Dashboard Fabric Controller (NDFC), anteriormente Cisco Data Center Network Manager (DCNM), podría permitir que un atacante remoto autenticado con privilegios de administrador de red realice un ataque de inyección de comandos contra un dispositivo afectado. Esta vulnerabilidad se debe a una validación insuficiente de los argumentos de los comandos. Un atacante podría aprovechar esta vulnerabilidad enviando argumentos de comandos manipulados a un endpoint de API REST específico. Una explotación exitosa podría permitir al atacante sobrescribir archivos confidenciales o bloquear un contenedor específico, que se reiniciaría por sí solo, lo que provocaría una condición de denegación de servicio (DoS) de bajo impacto.",
      },
   ],
   id: "CVE-2024-20444",
   lastModified: "2024-10-08T15:26:38.527",
   metrics: {
      cvssMetricV31: [
         {
            cvssData: {
               attackComplexity: "LOW",
               attackVector: "NETWORK",
               availabilityImpact: "LOW",
               baseScore: 5.5,
               baseSeverity: "MEDIUM",
               confidentialityImpact: "NONE",
               integrityImpact: "HIGH",
               privilegesRequired: "HIGH",
               scope: "UNCHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L",
               version: "3.1",
            },
            exploitabilityScore: 1.2,
            impactScore: 4.2,
            source: "psirt@cisco.com",
            type: "Secondary",
         },
         {
            cvssData: {
               attackComplexity: "LOW",
               attackVector: "NETWORK",
               availabilityImpact: "LOW",
               baseScore: 5.5,
               baseSeverity: "MEDIUM",
               confidentialityImpact: "NONE",
               integrityImpact: "HIGH",
               privilegesRequired: "HIGH",
               scope: "UNCHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L",
               version: "3.1",
            },
            exploitabilityScore: 1.2,
            impactScore: 4.2,
            source: "nvd@nist.gov",
            type: "Primary",
         },
      ],
   },
   published: "2024-10-02T17:15:16.390",
   references: [
      {
         source: "psirt@cisco.com",
         tags: [
            "Vendor Advisory",
         ],
         url: "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-raci-T46k3jnN",
      },
   ],
   sourceIdentifier: "psirt@cisco.com",
   vulnStatus: "Analyzed",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-88",
            },
         ],
         source: "psirt@cisco.com",
         type: "Secondary",
      },
      {
         description: [
            {
               lang: "en",
               value: "CWE-88",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

cve-2024-20444

Vulnerability from cvelistv5

gsd-2024-20444

Vulnerability from gsd

cisco-sa-ndfc-raci-T46k3jnN

Vulnerability from csaf_cisco

cisco-sa-ndfc-raci-t46k3jnn

Vulnerability from csaf_cisco

ghsa-rvwm-3c9j-xm8h

Vulnerability from github

wid-sec-w-2024-3072

Vulnerability from csaf_certbund

fkie_cve-2024-20444

Vulnerability from fkie_nvd

Tags

Sightings

Nomenclature