Description
A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device. This vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition.
Metrics
CVSS 3.1 5.5/10
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:LWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Data Center Network Manager | 11.2(1); 7.0(2); 10.3(2)IPFM; 10.1(1); 7.2(3); 7.2(2); 7.2(1); 11.0(1); 10.4(1); 10.2(1); 7.2(2a); 10.1(2); 7.1(1); 12.1(1); 11.1(1); 10.3(1); 10.3(1)R(1); 7.0(1); 10.0(1); 7.1(2) |
| cisco | data_center_network_manager | 11.2(1); 7.0(2); 10.3(2)IPFM; 10.1(1); 7.2(3); 7.2(2); 7.2(1); 11.0(1); 10.4(1); 10.2(1); 7.2(2a); 10.1(2); 7.1(1); 12.1(1); 11.1(1); 10.3(1); 10.3(1)R(1); 7.0(1); 10.0(1); 7.1(2) |
References
Timeline
- Published
- Oct 2, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed