Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2022-20857: Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site reques...
CVE-2022-20857 · published 4 years ago
Summary
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. For more information about these vulnerabilities, see the Details section of this adv...
What to do
- Update cisco nexus_dashboard to version 2.2\(1e\) or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| cisco | nexus_dashboard |
>= 1.0, < 2.2\(1e\) cpe:2.3:a:cisco:nexus_dashboard:*:*:*:*:*:*:*:* |
Original advisory text
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site reques...
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. For more information about these vulnerabilities, see the Details section of this advisory.
References
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Type
CWE-306Missing Authentication for Critical Function
Timeline
Published21 Jul 2022
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2022-20857 · NVD
Track software like this
Free during beta