Cisco Releases Patches for Critical Flaws Impacting Nexus Dashboard for Data Centers

🗓️ 21 Jul 2022 04:58:00Reported by The Hacker NewsType

Cisco patches 45 vulnerabilities affecting Nexus Dashboard for Data Centers. Critical flaws could enable remote attackers to execute arbitrary commands, read/upload container images, and perform a cross-site request forgery

Reporter	Title	Published	Views	Family All 68
ATTACKERKB	CVE-2022-20812	6 Jul 202216:00	–	attackerkb
ATTACKERKB	CVE-2022-20860	20 Jul 202223:00	–	attackerkb
ATTACKERKB	CVE-2022-20858	20 Jul 202223:00	–	attackerkb
ATTACKERKB	CVE-2022-20857	20 Jul 202223:00	–	attackerkb
ATTACKERKB	CVE-2022-20861	20 Jul 202223:00	–	attackerkb
BDU FSTEC	The vulnerability of the API interface of the database of Cisco Expressway Series and Cisco Telepresence VCS devices allows attackers to perform attacks by bypassing the absolute path on the vulnerable device and rewriting files in the basic operating system with root privileges.	8 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability affects the service for managing container images on the analytics and automation platform for Cisco Nexus Dashboard. This allows a malicious actor to load arbitrary container images.	21 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco Nexus Dashboard, a platform for analytics and automation of cloud computing data centers, allows a attacker to perform a CSRF attack.	21 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the API interface of the analytics and automation platform for working with Cisco Nexus Dashboard cloud networks allows a hacker to execute arbitrary commands with root privileges.	21 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the TLS and SSL protocols used by Cisco Nexus Dashboard for analyzing and automating cloud network operations stems from errors in the certificate validation process. This allows attackers to access confidential information or alter data.	2 Aug 202200:00	–	bdu_fstec

21 Jul 2022 11:32Current

1.6Low risk

Vulners AI Score1.6

CVSS 3.19.8

CVSS 28.5

EPSS0.01878

SSVC