CVE-2024-20444

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') (CWE-88)

Published: Oct 2, 2024 / Updated: 48d ago

Summary: A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to perform a command injection attack against an affected device. Summary: A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacker with low privileges to execute arbitrary code on an affected device.This vulnerability is due to improper path validation.

A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device.   This vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-raci-T46k3jnN Security Impact Rating: Medium CVE: CVE-2024-20444

Development Last Updated: 11/7/2024 CVEs: CVE-2024-20490 , CVE-2024-20448 , CVE-2024-20444 , CVE-2024-20491 , CVE-2024-20449 , CVE-2024-20477 , CVE-2024-20536 , CVE-2024-20442 , CVE-2024-20441 , CVE-2024-20432 , CVE-2024-20385 , CVE-2024-20438

cveNotify : 🚨 CVE-2024-20444A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device. This vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition.🎖@cveNotify

cveNotify : 🚨 CVE-2024-20444A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager (DCNM), could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device. This vulnerability is due to insufficient validation of command arguments. An attacker could exploit this vulnerability by submitting crafted command arguments to a specific REST API endpoint. A successful exploit could allow the attacker to overwrite sensitive files or crash a specific container, which would restart on its own, causing a low-impact denial of service (DoS) condition.🎖@cveNotify

With a good dozen security advisories, Cisco is fixing a number of gaps in VPN routers, security appliances from the Meraki series, blade centers and the cloud network management "Nexus Dashboard". The bug allows an attacker with a valid user account to execute arbitrary code on a device managed by a vulnerable NDFC instance.

The vulnerability allows a local attacker to gain access to potentially sensitive information. Subscribe Cisco Nexus Dashboard Fabric Controller (NDFC)