Michael J Davenport

**Name of the Vulnerable Software and Affected Versions** Cisco Nexus Dashboard (affected versions not specified) **Description** The issue is related to insufficient data authentication in the container image management service of Cisco Nexus Dashboard, which could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. An attacker could exploit this by uploading arbitrary container images using a TCP connection to the vulnerable service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Nexus Dashboard (affected versions not specified) **Description** The issue is related to multiple vulnerabilities in the Cisco Nexus Dashboard, including a cross-site request forgery (CSRF) attack. An unauthenticated, remote attacker could execute arbitrary commands, read or upload container image files, or perform a CSRF attack. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Nexus Dashboard (affected versions not specified) **Description** The issue is related to multiple vulnerabilities in the Cisco Nexus Dashboard, which could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. A specific vulnerability is associated with a lack of authentication for a critical function in the API interface of the Cisco Nexus Dashboard platform, allowing a remote attacker to execute arbitrary commands with root privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.