github - ghsa-rvwm-3c9j-xm8h

ghsa-rvwm-3c9j-xm8h

Vulnerability from github

Published

2024-10-02 18:31

Modified

2024-10-02 18:31

Severity ?

5.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L

Details

A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device. This vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition.

Show details on source website

JSON

To clipboard

{
   affected: [],
   aliases: [
      "CVE-2024-20444",
   ],
   database_specific: {
      cwe_ids: [
         "CWE-88",
      ],
      github_reviewed: false,
      github_reviewed_at: null,
      nvd_published_at: "2024-10-02T17:15:16Z",
      severity: "MODERATE",
   },
   details: "A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device.\n&nbsp;\nThis vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition.",
   id: "GHSA-rvwm-3c9j-xm8h",
   modified: "2024-10-02T18:31:33Z",
   published: "2024-10-02T18:31:32Z",
   references: [
      {
         type: "ADVISORY",
         url: "https://nvd.nist.gov/vuln/detail/CVE-2024-20444",
      },
      {
         type: "WEB",
         url: "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-raci-T46k3jnN",
      },
   ],
   schema_version: "1.4.0",
   severity: [
      {
         score: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L",
         type: "CVSS_V3",
      },
   ],
}

CVE-2024-20444 (GCVE-0-2024-20444)

Vulnerability from cvelistv5

Published

2024-10-02 16:54

Modified

2024-10-02 19:45

Severity ?

5.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L

Summary

A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device.   This vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition.

References

▼	URL	Tags
	https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-raci-T46k3jnN

Impacted products

	Vendor	Product	Version
	Cisco	Cisco Data Center Network Manager	Version: 11.2(1) Version: 7.0(2) Version: 10.3(2)IPFM Version: 10.1(1) Version: 7.2(3) Version: 7.2(2) Version: 7.2(1) Version: 11.0(1) Version: 10.4(1) Version: 10.2(1) Version: 7.2(2a) Version: 10.1(2) Version: 7.1(1) Version: 12.1(1) Version: 11.1(1) Version: 10.3(1) Version: 10.3(1)R(1) Version: 7.0(1) Version: 10.0(1) Version: 7.1(2) Version: 11.4(1) Version: 10.4(2) Version: 11.3(1) Version: 11.5(1) Version: 11.5(2) Version: 11.5(3) Version: 12.0.1a Version: 11.5(3a) Version: 12.0.2d Version: 12.0.2f Version: 11.5(4) Version: 12.1.1 Version: 12.1.1e Version: 12.1.1p Version: 12.1.2e Version: 12.1.2p Version: 12.1.3b Version: 12.2.1

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:cisco:data_center_network_manager:-:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "data_center_network_manager",
                  vendor: "cisco",
                  versions: [
                     {
                        status: "affected",
                        version: "11.2(1)",
                     },
                     {
                        status: "affected",
                        version: "7.0(2)",
                     },
                     {
                        status: "affected",
                        version: "10.3(2)IPFM",
                     },
                     {
                        status: "affected",
                        version: "10.1(1)",
                     },
                     {
                        status: "affected",
                        version: "7.2(3)",
                     },
                     {
                        status: "affected",
                        version: "7.2(2)",
                     },
                     {
                        status: "affected",
                        version: "7.2(1)",
                     },
                     {
                        status: "affected",
                        version: "11.0(1)",
                     },
                     {
                        status: "affected",
                        version: "10.4(1)",
                     },
                     {
                        status: "affected",
                        version: "10.2(1)",
                     },
                     {
                        status: "affected",
                        version: "7.2(2a)",
                     },
                     {
                        status: "affected",
                        version: "10.1(2)",
                     },
                     {
                        status: "affected",
                        version: "7.1(1)",
                     },
                     {
                        status: "affected",
                        version: "12.1(1)",
                     },
                     {
                        status: "affected",
                        version: "11.1(1)",
                     },
                     {
                        status: "affected",
                        version: "10.3(1)",
                     },
                     {
                        status: "affected",
                        version: "10.3(1)R(1)",
                     },
                     {
                        status: "affected",
                        version: "7.0(1)",
                     },
                     {
                        status: "affected",
                        version: "10.0(1)",
                     },
                     {
                        status: "affected",
                        version: "7.1(2)",
                     },
                     {
                        status: "affected",
                        version: "11.4(1)",
                     },
                     {
                        status: "affected",
                        version: "10.4(2)",
                     },
                     {
                        status: "affected",
                        version: "11.3(1)",
                     },
                     {
                        status: "affected",
                        version: "11.5(1)",
                     },
                     {
                        status: "affected",
                        version: "11.5(2)",
                     },
                     {
                        status: "affected",
                        version: "11.5(3)",
                     },
                     {
                        status: "affected",
                        version: "12.0.1a",
                     },
                     {
                        status: "affected",
                        version: "11.5(3a)",
                     },
                     {
                        status: "affected",
                        version: "12.0.2d",
                     },
                     {
                        status: "affected",
                        version: "12.0.2f",
                     },
                     {
                        status: "affected",
                        version: "11.5(4)",
                     },
                     {
                        status: "affected",
                        version: "12.1.1",
                     },
                     {
                        status: "affected",
                        version: "12.1.1e",
                     },
                     {
                        status: "affected",
                        version: "12.1.1p",
                     },
                     {
                        status: "affected",
                        version: "12.1.2e",
                     },
                     {
                        status: "affected",
                        version: "12.1.2p",
                     },
                     {
                        status: "affected",
                        version: "12.1.3b",
                     },
                     {
                        status: "affected",
                        version: "12.2.1",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-20444",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-02T19:29:46.344080Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-02T19:45:29.694Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unknown",
               product: "Cisco Data Center Network Manager",
               vendor: "Cisco",
               versions: [
                  {
                     status: "affected",
                     version: "11.2(1)",
                  },
                  {
                     status: "affected",
                     version: "7.0(2)",
                  },
                  {
                     status: "affected",
                     version: "10.3(2)IPFM",
                  },
                  {
                     status: "affected",
                     version: "10.1(1)",
                  },
                  {
                     status: "affected",
                     version: "7.2(3)",
                  },
                  {
                     status: "affected",
                     version: "7.2(2)",
                  },
                  {
                     status: "affected",
                     version: "7.2(1)",
                  },
                  {
                     status: "affected",
                     version: "11.0(1)",
                  },
                  {
                     status: "affected",
                     version: "10.4(1)",
                  },
                  {
                     status: "affected",
                     version: "10.2(1)",
                  },
                  {
                     status: "affected",
                     version: "7.2(2a)",
                  },
                  {
                     status: "affected",
                     version: "10.1(2)",
                  },
                  {
                     status: "affected",
                     version: "7.1(1)",
                  },
                  {
                     status: "affected",
                     version: "12.1(1)",
                  },
                  {
                     status: "affected",
                     version: "11.1(1)",
                  },
                  {
                     status: "affected",
                     version: "10.3(1)",
                  },
                  {
                     status: "affected",
                     version: "10.3(1)R(1)",
                  },
                  {
                     status: "affected",
                     version: "7.0(1)",
                  },
                  {
                     status: "affected",
                     version: "10.0(1)",
                  },
                  {
                     status: "affected",
                     version: "7.1(2)",
                  },
                  {
                     status: "affected",
                     version: "11.4(1)",
                  },
                  {
                     status: "affected",
                     version: "10.4(2)",
                  },
                  {
                     status: "affected",
                     version: "11.3(1)",
                  },
                  {
                     status: "affected",
                     version: "11.5(1)",
                  },
                  {
                     status: "affected",
                     version: "11.5(2)",
                  },
                  {
                     status: "affected",
                     version: "11.5(3)",
                  },
                  {
                     status: "affected",
                     version: "12.0.1a",
                  },
                  {
                     status: "affected",
                     version: "11.5(3a)",
                  },
                  {
                     status: "affected",
                     version: "12.0.2d",
                  },
                  {
                     status: "affected",
                     version: "12.0.2f",
                  },
                  {
                     status: "affected",
                     version: "11.5(4)",
                  },
                  {
                     status: "affected",
                     version: "12.1.1",
                  },
                  {
                     status: "affected",
                     version: "12.1.1e",
                  },
                  {
                     status: "affected",
                     version: "12.1.1p",
                  },
                  {
                     status: "affected",
                     version: "12.1.2e",
                  },
                  {
                     status: "affected",
                     version: "12.1.2p",
                  },
                  {
                     status: "affected",
                     version: "12.1.3b",
                  },
                  {
                     status: "affected",
                     version: "12.2.1",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device.\r\n&nbsp;\r\nThis vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition.",
            },
         ],
         exploits: [
            {
               lang: "en",
               value: "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "HIGH",
                  privilegesRequired: "HIGH",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L",
                  version: "3.1",
               },
               format: "cvssV3_1",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-88",
                     description: "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')",
                     lang: "en",
                     type: "cwe",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-10-02T16:54:09.855Z",
            orgId: "d1c1063e-7a18-46af-9102-31f8928bc633",
            shortName: "cisco",
         },
         references: [
            {
               name: "cisco-sa-ndfc-raci-T46k3jnN",
               url: "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-raci-T46k3jnN",
            },
         ],
         source: {
            advisory: "cisco-sa-ndfc-raci-T46k3jnN",
            defects: [
               "CSCwj55173",
            ],
            discovery: "INTERNAL",
         },
         title: "Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability",
      },
   },
   cveMetadata: {
      assignerOrgId: "d1c1063e-7a18-46af-9102-31f8928bc633",
      assignerShortName: "cisco",
      cveId: "CVE-2024-20444",
      datePublished: "2024-10-02T16:54:09.855Z",
      dateReserved: "2023-11-08T15:08:07.677Z",
      dateUpdated: "2024-10-02T19:45:29.694Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted