Medium severity · published Oct 2, 2024
CVE-2024-20444
Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability
5.5
CVSS
0.8%
EPSS
No
On KEV
Description
A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device.
This vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
None
Integrity
High
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CD
Cisco Data Center Network Manager · Cisco
11.2(1); 7.0(2); 10.3(2)IPFM; 10.1(1); 7.2(3); 7.2(2); +32 more · source: vendor
ND
Nexus Dashboard Fabric Controller · Cisco
before 12.2.2 · source: NVD
DC
Data Center Network Manager · Cisco
11.2(1); 7.0(2); 10.3(2)IPFM; 10.1(1); 7.2(3); 7.2(2); +32 more · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-20444
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-20444
Vendor Advisory
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-raci-T46k3jnN
More from Cisco Data Center Network Manager
8.8
CVE-2024-20536
Cisco Nexus Dashboard Fabric Controller SQL Injection Vulnerability
8.8
CVE-2024-20449
Cisco Nexus Dashboard Fabric Controller Remote Code Execution Vulnerability
8.8
CVE-2024-20432
Cisco Nexus Dashboard Fabric Controller Web UI Command Injection Vulnerability
8.8
CVE-2024-20281
A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hosted services could allow an unauthenticated, remote attacker to conduct…
8.7
CVE-2025-20163
Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability
