CVE-2024-20432

The vulnerability results from improper user authorization and insufficient validation of command arguments passed to the system. An attacker can send crafted requests to the vulnerable REST API endpoint or inject malicious data through the web UI. Successful exploitation of the vulnerability allows execution of arbitrary commands on the CLI interface of devices managed by Cisco NDFC with network-admin privileges, meaning full control over the network infrastructure.

An attacker can execute arbitrary commands on devices managed by Cisco NDFC with network-admin privileges, which can lead to complete takeover of network infrastructure, loss of confidentiality, integrity, and availability of managed resources.

Patches available from the manufacturer should be applied in accordance with the references: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-cmdinj-UvYZrKfr. This vulnerability does not affect Cisco NDFC devices configured as a SAN controller.

Cisco Nexus Dashboard Fabric Controller (NDFC) in configurations other than SAN (storage area network) controller deployment. Specific versions are indicated in the manufacturer's references.