Description
A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or Config-only backup files to access sensitive information.
This vulnerability exists because authentication details are included in the encrypted backup files. An attacker with a valid backup file and encryption password from an affected device could decrypt the backup file. The attacker could then use the authentication details in the backup file to access internal-only APIs on the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cisco | Cisco Nexus Dashboard | 1.1(3e), 1.1(3c), 1.1(3d), 1.1(0d), 1.1(2i), 2.0(1b), 1.1(2h), 1.1(0c), 1.1(3f), 2.1(1d), 2.1(1e), 2.0(2g), 2.0(2h), 2.1(2d), 2.0(1d), 2.2(1h), 2.2(1e), 2.2(2d), 2.1(2f), 2.3(1c), 2.3(2b), 2.3(2c), 2.3(2d), 2.3(2e), 3.0(1f), 3.0(1i), 3.1(1k), 3.1(1l), 3.2(1e), 3.2(1i), 3.3(1a), 3.3(1b), 3.3(2b), 4.… | — |
Advisories 2
- NCSC-2026-0105 Kwetsbaarheden verholpen in Cisco Nexus Dashboard en Nexus Dashboard Insights NCSC-NL (Netherlands) · Apr 3, 2026
- WID-SEC-2026-0955 Cisco Nexus Dashboard und Insights: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 1, 2026