PT-2022-3925 · Cisco · Cisco Nexus Dashboard

Logan Sanderson · Published 2022-07-20 · Updated 2022-07-27 · CVE-2022-20860

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco Nexus Dashboard (affected versions not specified)

Description A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to alter communications with associated controllers or view sensitive information. This issue exists because SSL server certificates are not validated when Cisco Nexus Dashboard is establishing a connection to controllers. An attacker could exploit this vulnerability by using man-in-the-middle techniques to intercept traffic and then using a crafted certificate to impersonate the controllers. A successful exploit could allow the attacker to alter communications between devices or view sensitive information, including Administrator credentials for these controllers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2022-04750

CVE-2022-20860

Affected Products

Cisco Nexus Dashboard

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2022-20860 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nd-tlsvld-TbAQLp3N · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-20860 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04750 · Security Note
• https://t.me/true_secator/3205 · Telegram Post
• https://t.me/cvenotify/33486 · Telegram Post
• https://t.me/cibsecurity/46721 · Telegram Post