PT-2024-8631 · Cisco · Cisco Nexus Dashboard Orchestrator

Lukas Mergenthaler · Published 2024-10-02 · Updated 2024-10-08 · CVE-2024-20385

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Nexus Dashboard Orchestrator (NDO) (affected versions not specified)

Description A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an unauthenticated, remote attacker to intercept sensitive information from an affected device. This issue exists because the Cisco NDO Validate Peer Certificate site management feature only validates certificates for certain devices when a new site is added or an existing one is reregistered. An attacker could exploit this by using machine-in-the-middle techniques to intercept traffic and then using a crafted certificate to impersonate the affected device, potentially allowing the attacker to learn sensitive information during communications between devices.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2024-10221

CVE-2024-20385

Affected Products

Cisco Nexus Dashboard Orchestrator

References · 10

• https://bdu.fstec.ru/vul/2024-10221 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndo-tlsvld-FdUF3cpw · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-20385 · Security Note
• https://osv.dev/vulnerability/CVE-2024-20385 · Vendor Advisory
• https://github.com/advisories/GHSA-qqf3-h6hq-fm58 · Note
• https://recordedfuture.com/vulnerability-database/CVE-2024-20385 · Note
• https://twitter.com/CVEnew/status/1841527254888939891 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1841557577626206323 · Twitter Post
• https://t.me/cvenotify/97420 · Telegram Post
• https://t.me/cvenotify/96844 · Telegram Post