Cisco NDFC Arbitrary Command Execution Vulnerability Advisory

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Type: Arbitrary Command Execution Vulnerability - Affected Product: Cisco Nexus Dashboard Fabric Controller (NDFC) - Vulnerability Impact: Allows unauthorized remote attackers to perform command injection attacks - Vulnerability Cause: Improper user authorization and insufficient command parameter validation 2. Affected Versions: - Affected Version: NDFC 11.5 and earlier versions - Affected Version: NDFC 12.0 3. Remediation Measures: - Patch Released: Cisco has released software updates to fix this vulnerability - Workaround: No workaround available 4. List of Affected Products: - Affected Product: Nexus Dashboard Insights - Affected Product: Nexus Dashboard Orchestrator (NDO) 5. Exclusions of Affected Products: - Affected Product: NDFC is not affected when configured for SAN controller deployment 6. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.1(1k) onwards, NDFC is distributed in Cisco Nexus Dashboard unified releases 7. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.2(1e) onwards, NDFC is included in Cisco Nexus Dashboard Release 12.2.2 8. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.1(1k) onwards, NDFC is distributed in Cisco Nexus Dashboard unified releases 9. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.2(1e) onwards, NDFC is included in Cisco Nexus Dashboard Release 12.2.2 10. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.1(1k) onwards, NDFC is distributed in Cisco Nexus Dashboard unified releases 11. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.2(1e) onwards, NDFC is included in Cisco Nexus Dashboard Release 12.2.2 12. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.1(1k) onwards, NDFC is distributed in Cisco Nexus Dashboard unified releases 13. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.2(1e) onwards, NDFC is included in Cisco Nexus Dashboard Release 12.2.2 14. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.1(1k) onwards, NDFC is distributed in Cisco Nexus Dashboard unified releases 15. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.2(1e) onwards, NDFC is included in Cisco Nexus Dashboard Release 12.2.2 16. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.1(1k) onwards, NDFC is distributed in Cisco Nexus Dashboard unified releases 17. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.2(1e) onwards, NDFC is included in Cisco Nexus Dashboard Release 12.2.2 18. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.1(1k) onwards, NDFC is distributed in Cisco Nexus Dashboard unified releases 19. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.2(1e) onwards, NDFC is included in Cisco Nexus Dashboard Release 12.2.2 20. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.1(1k) onwards, NDFC is distributed in Cisco Nexus Dashboard unified releases 21. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.2(1e) onwards, NDFC is included in Cisco Nexus Dashboard Release 12.2.2 22. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.1(1k) onwards, NDFC is distributed in Cisco Nexus Dashboard unified releases 23. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.2(1e) onwards, NDFC is included in Cisco Nexus Dashboard Release 12.2.2 24. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.1(1k) onwards, NDFC is distributed in Cisco Nexus Dashboard unified releases 25. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.2(1e) onwards, NDFC is included in Cisco Nexus Dashboard Release 12.2.2 26. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.1(1k) onwards, NDFC is distributed in Cisco Nexus Dashboard unified releases 27. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.2(1e) onwards, NDFC is included in Cisco Nexus Dashboard Release 12.2.2 28. Exclusions of Affected Products: - Affected Product: NDFC from Cisco Nexus Dashboard Release 3.1(1k) onwards, NDFC is distributed in Cisco Nexus Dashboard unified releases 29. Exclusions of Affected Products: - Affected Product

Goal Reached Thanks to every supporter — we hit 100%!

Cisco NDFC Arbitrary Command Execution Vulnerability Advisory