6.7
CVSSv3

CVE-2022-20908

Published: 22/07/2022 Updated: 07/11/2023
CVSS v3 Base Score: 6.7 | Impact Score: 5.9 | Exploitability Score: 0.8
VMScore: 0

Vulnerability Summary

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local malicious user to elevate privileges on an affected device. These vulnerabilities are due to insufficient input validation during CLI command execution on an affected device. An attacker could exploit these vulnerabilities by authenticating as the rescue-user and executing vulnerable CLI commands using a malicious payload. A successful exploit could allow the malicious user to elevate privileges to root on an affected device.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco nexus dashboard

Vendor Advisories

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device These vulnerabilities are due to insufficient input validation during CLI command execution on an affected device An attacker could exploit these vulnerabilities by authenticating as the rescue-user and execut ...