CVE-2022-20857

—

CVSS 3.1

9.8 critical

EPSS

2%p73

Published

Jul 21, 2022 (Jul 21, 2022)

Modified

Jun 17, 2026

Description

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request forgery attack. For more information about these vulnerabilities, see the Details section of this advisory.

Vendors: cisco
Products: nexus dashboard
Weakness: CWE-306
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news1 stories

Cisco Releases Patches for Critical Flaws Impacting Nexus Dashboard for Data Centers

The Hacker NewsJul 21, 11:32 UTC · Jul 21, 2022Vulnerability CVE-2022-20857 CVE-2022-20858 CVE-2022-20861+2 CVEs