CVE-2022-20907: medium-severity vulnerability in Cisco Nexus Dashboard
Cisco Nexus Dashboard Privilege Escalation Vulnerabilities
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6epss 0.2%
Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. These vulnerabilities are due to insufficient input validation during CLI command execution on an affected device. An attacker could exploit these vulnerabilities by authenticating as the rescue-user and executing vulnerable CLI commands using a malicious payload. A successful exploit could allow the attacker to elevate privileges to root on an affected device.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Affected products
Cisco · Cisco Nexus DashboardRelated CVEs — Cisco Nexus Dashboard
In the same product, most dangerous first.
CVE-2022-20857CRITICALCisco Nexus Dashboard Unauthorized Access VulnerabilitiesEPSS 1.6%CVE-2022-20858CRITICALCisco Nexus Dashboard Unauthorized Access VulnerabilitiesEPSS 1.3%CVE-2022-20913MEDIUMCisco Nexus Dashboard Arbitrary File Write VulnerabilityEPSS 1.1%CVE-2023-20014HIGHCVE-2023-20014EPSS 1.0%CVE-2022-20861CRITICALCisco Nexus Dashboard Unauthorized Access VulnerabilitiesEPSS 0.6%CVE-2025-20344MEDIUMCisco Nexus Dashboard Path Traversal VulnerabilityEPSS 0.6%