CVE-2024-20282 Privilege escalation in Cisco Nexus Dashboard
An authenticated local attacker with rescue-user credentials can elevate privileges to root on Cisco Nexus Dashboard devices.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-20282?
CVE-2024-20282 is a medium-severity vulnerability in Cisco Nexus Dashboard, published on 3 Apr 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an affected device. This vulnerability is due to insufficient protections for a sensitive access token. An attacker could exploit this vulnerability by using this token to access resources within the device infrastructure. A successful exploit could allow an attacker to gain root access to the filesystem or hosted containers on an affected device.
Which versions are affected by CVE-2024-20282?
It affects 1 product.
Products include Cisco Nexus Dashboard.
How do I fix CVE-2024-20282?
No fix has been published for CVE-2024-20282 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-20282 being exploited?
There is no known exploitation of CVE-2024-20282 in the wild and no public exploit code.
Other vulnerabilities in Cisco Nexus Dashboard
- CVE-2022-20857 Cisco Nexus Dashboard Unauthorized Access Vulnerabilities
- CVE-2022-20858 Cisco Nexus Dashboard Unauthorized Access Vulnerabilities
- CVE-2022-20861 Cisco Nexus Dashboard Unauthorized Access Vulnerabilities
- CVE-2025-20163 Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability
- CVE-2024-20281 Cross-site request forgery in Cisco Data Center Network Manager
Sources
Also known as GHSA-mg3q-349p-vcpv.