Skip to content
OpenAdvisories
Medium · 4.9 CVE-2022-20913 EUVD-2022-26163GHSA-fxf5-95g5-f94p

Cisco Nexus Dashboard Arbitrary File Write Vulnerability

Published Jul 21, 2022 · Updated Nov 1, 2024 · Assigned by cisco

Description

A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to write arbitrary files on an affected device. This vulnerability is due to insufficient input validation in the web-based management interface of Cisco Nexus Dashboard. An attacker with Administrator credentials could exploit this vulnerability by uploading a crafted file. A successful exploit could allow the attacker to overwrite arbitrary files on an affected device.

Affected products

VendorProductAffectedFixed
Cisco Cisco Nexus Dashboard — —

References