CVE-2024-20281 Cross-site request forgery in Cisco Data Center Network Manager
Unauthenticated remote attackers can perform arbitrary actions with user privileges via CSRF, potentially modifying configuration or creating accounts.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-20281?
CVE-2024-20281 is a high-severity vulnerability in Cisco Data Center Network Manager, published on 3 Apr 2024. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hosted services could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management interface on an affected system. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user. If the affected user has administrative privileges, these actions could include modifying the system configuration and creating new privileged accounts. Note: There are internal security mechanisms in place that limit the scope of this exploit, reducing the Security Impact Rating of this vulnerability.
Weakness: CWE-352
Which versions are affected by CVE-2024-20281?
It affects 4 products.
Products include Cisco Nexus Dashboard, Cisco Nexus Dashboard Fabric Controller, Cisco Nexus Dashboard Insights, Cisco Nexus Dashboard Orchestrator.
How do I fix CVE-2024-20281?
No fix has been published for CVE-2024-20281 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-20281 being exploited?
There is no known exploitation of CVE-2024-20281 in the wild and no public exploit code.
Other vulnerabilities in Cisco Data Center Network Manager
- CVE-2022-20857 Cisco Nexus Dashboard Unauthorized Access Vulnerabilities
- CVE-2022-20858 Cisco Nexus Dashboard Unauthorized Access Vulnerabilities
- CVE-2022-20861 Cisco Nexus Dashboard Unauthorized Access Vulnerabilities
- CVE-2025-20163 Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability
- CVE-2023-20014 Denial of service in Cisco Nexus Dashboard
Sources
Also known as GHSA-c4gx-f8pf-9jw3.