📦 Nexus Dashboard Fabric Controller

An authenticated low-privileged attacker can execute arbitrary CLI commands with network-admin privileges on Cisco NDFC-managed devices via command injection in REST API or web UI. This affects Cisco ...

This SQL injection vulnerability in Cisco Nexus Dashboard Fabric Controller allows authenticated users with read-only privileges to execute arbitrary SQL commands through REST API or web interface. At...

This vulnerability allows authenticated remote attackers with low privileges to execute arbitrary code as root on Cisco Nexus Dashboard Fabric Controller devices. Attackers exploit improper path valid...

This vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC) allows unauthenticated remote attackers to read arbitrary files via the Out-of-Band Plug and Play provisioning web server. It affec...

This vulnerability allows authenticated low-privileged attackers to upload or delete files on Cisco NDFC devices via a specific REST API endpoint with missing authorization controls. Only systems runn...

This vulnerability in Cisco Nexus Dashboard Insights allows attackers who obtain tech support files to view remote controller admin credentials in clear text. Organizations using affected Cisco Nexus ...

This vulnerability allows authenticated remote attackers with network-admin privileges to execute arbitrary commands on Cisco Nexus Dashboard Fabric Controller (NDFC) systems. Attackers can overwrite ...

This vulnerability allows authenticated low-privileged attackers to access sensitive configuration information through a specific REST API endpoint in Cisco NDFC. Attackers can download configuration ...