SB2024100422 - Multiple vulnerabilities in Cisco Nexus Dashboard Fabric Controller (NDFC)

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2024100422

SB2024100422 - Multiple vulnerabilities in Cisco Nexus Dashboard Fabric Controller (NDFC)

Published: October 4, 2024 Updated: October 10, 2024

Security Bulletin ID SB2024100422
Severity
Medium
Patch available
YES
Number of vulnerabilities 4
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

Medium 50% Low 50%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 4 secuirty vulnerabilities.


1) Path traversal (CVE-ID: CVE-2024-20449)

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences. A remote user can send a specially crafted HTTP request and execute arbitrary code on the system.


2) Cleartext Storage in a File or on Disk (CVE-ID: CVE-2024-20448)

The vulnerability allows a local attacker to gain access to potentially sensitive information.

The vulnerability exists due to the improper storage of sensitive information within config only and full backup files. A local attacker can access sensitive information, including NDFC-connected device credentials, the NDFC site manager private key, and the scheduled backup file encryption key.


3) Command Injection (CVE-ID: CVE-2024-20432)

The vulnerability allows a remote attacker to execute arbitrary commands on the target system.

The vulnerability exists due to improper user authorization and insufficient validation of command arguments. A remote user can pass specially crafted data to the application and execute arbitrary commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


4) Improper Neutralization of Argument Delimiters in a Command (CVE-ID: CVE-2024-20444)

The vulnerability allows a remote user to execute arbitrary argument.

The vulnerability exists due to insufficient validation of command arguments. A remote administrator can overwrite sensitive files or crash a specific container, leading to denial of service (DoS) attack.


Remediation

Install update from vendor's website.

References