Executive Summary

This vulnerability affects the configuration backup feature of Cisco Nexus Dashboard. It occurs because authentication details are included within encrypted backup files.

An attacker who has both the encryption password and access to Full or Config-only backup files from an affected device can decrypt these backups. By extracting the authentication details, the attacker can access internal-only APIs on the device.

If successfully exploited, the attacker could execute arbitrary commands on the underlying operating system with root privileges.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability includes unauthorized access to sensitive authentication details stored in backup files.

An attacker with these details can access internal-only APIs and potentially execute arbitrary commands on the device's operating system as the root user.

This could lead to full control over the affected device, compromising its security and potentially affecting the network infrastructure it manages.

Useful 0 Not Useful 0

Detection Guidance

There are no specific detection commands or methods provided to identify this vulnerability on your network or system.

Detection would generally involve verifying if your Cisco Nexus Dashboard is running a vulnerable software version (3.2 and earlier, or 4.1) and if configuration backup files with encryption passwords are accessible.

Useful 0 Not Useful 0

Mitigation Strategies

Cisco strongly recommends upgrading to fixed software releases to fully remediate this vulnerability.

• Upgrade Cisco Nexus Dashboard to version 4.2 or later, which are not vulnerable.
• Avoid using vulnerable releases such as versions 3.2 and earlier, and 4.1.
• Obtain fixed software through authorized channels or Cisco Technical Assistance Center (TAC).

No workarounds are available for this vulnerability, so upgrading is the only effective mitigation.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability in Cisco Nexus Dashboard's configuration backup feature could lead to unauthorized access to sensitive information by attackers who have both the encryption password and access to backup files. This exposure of authentication details and potential for executing arbitrary commands with root privileges could compromise the confidentiality and integrity of data.

Such a compromise may impact compliance with common standards and regulations like GDPR and HIPAA, which require protection of sensitive data and strict access controls. Unauthorized access to sensitive information and system control could result in violations of these regulatory requirements.

However, the provided information does not explicitly mention compliance impacts or specific regulatory considerations.

Useful 0 Not Useful 0