Cisco NDFC Arbitrary Command Execution Vulnerability Advisory

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Type: Arbitrary Command Execution Vulnerability - Affected Product: Cisco Nexus Dashboard Fabric Controller (NDFC) - Impact: Allows unauthorized remote attackers to perform command injection attacks - Cause: Improper user authorization and insufficient validation of command parameters 2. Affected Versions: - Affected Versions: NDFC 11.5 and earlier versions - Affected Versions: NDFC 12.0 3. Remediation: - Fix Released: Cisco has released software updates to fix this vulnerability - Workaround: No workaround available 4. Affected Products: - Affected Product: Nexus Dashboard Insights - Affected Product: Nexus Dashboard Orchestrator (NDO) 5. Excluded Affected Products: - Excluded Product: NDFC configured as SAN controller deployment is not affected 6. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.1(1k), NDFC is distributed in the Cisco Nexus Dashboard unified release 7. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.2(1e), NDFC is included in Cisco Nexus Dashboard Release 12.2.2 8. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.1(1k), NDFC is distributed in the Cisco Nexus Dashboard unified release 9. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.2(1e), NDFC is included in Cisco Nexus Dashboard Release 12.2.2 10. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.1(1k), NDFC is distributed in the Cisco Nexus Dashboard unified release 11. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.2(1e), NDFC is included in Cisco Nexus Dashboard Release 12.2.2 12. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.1(1k), NDFC is distributed in the Cisco Nexus Dashboard unified release 13. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.2(1e), NDFC is included in Cisco Nexus Dashboard Release 12.2.2 14. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.1(1k), NDFC is distributed in the Cisco Nexus Dashboard unified release 15. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.2(1e), NDFC is included in Cisco Nexus Dashboard Release 12.2.2 16. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.1(1k), NDFC is distributed in the Cisco Nexus Dashboard unified release 17. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.2(1e), NDFC is included in Cisco Nexus Dashboard Release 12.2.2 18. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.1(1k), NDFC is distributed in the Cisco Nexus Dashboard unified release 19. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.2(1e), NDFC is included in Cisco Nexus Dashboard Release 12.2.2 20. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.1(1k), NDFC is distributed in the Cisco Nexus Dashboard unified release 21. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.2(1e), NDFC is included in Cisco Nexus Dashboard Release 12.2.2 22. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.1(1k), NDFC is distributed in the Cisco Nexus Dashboard unified release 23. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.2(1e), NDFC is included in Cisco Nexus Dashboard Release 12.2.2 24. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.1(1k), NDFC is distributed in the Cisco Nexus Dashboard unified release 25. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.2(1e), NDFC is included in Cisco Nexus Dashboard Release 12.2.2 26. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.1(1k), NDFC is distributed in the Cisco Nexus Dashboard unified release 27. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.2(1e), NDFC is included in Cisco Nexus Dashboard Release 12.2.2 28. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.1(1k), NDFC is distributed in the Cisco Nexus Dashboard unified release 29. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.2(1e), NDFC is included in Cisco Nexus Dashboard Release 12.2.2 30. Excluded Affected Products: - Excluded Product: Starting from Cisco Nexus Dashboard Release 3.1(1k), NDFC is dis

Goal Reached Thanks to every supporter — we hit 100%!

Cisco NDFC Arbitrary Command Execution Vulnerability Advisory