writeups.xyz / Unauthenticated Remote Code Execution in Cisco Nexus Dashboard Fabric Controller (formerly DCNM)

Submitter : c2a

Date: 30 March 2022

Bounty : undisclosed

Vulnerabilities :

• Insecure Deserialization
• Local Privilege Escalation
• RCE

Programs :

• Cisco

Authors :

• Pedro Ribeiro (@Pedrib1337)

Link :
https://github.com/pedrib/PoC/blob/master/advisories/Cisco/DCNMPwn.md