VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Aug 27, 2025· Updated Jun 17, 2026

CVE-2025-20344

CVE-2025-20344

Description

A vulnerability in the backup restore functionality of Cisco Nexus Dashboard could allow an authenticated, remote attacker to conduct a path traversal attack on an affected device.

This vulnerability is due to insufficient validation of the contents of a backup file. An attacker with valid Administrator credentials could exploit this vulnerability by restoring a crafted backup file to an affected device. A successful exploit could allow the attacker to gain root privileges on the underlying shell on the affected device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Cisco Systems, Inc./Nexus Dashboard3 versions
    cpe:2.3:a:cisco:nexus_dashboard:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:cisco:nexus_dashboard:*:*:*:*:*:*:*:*range: <4.1\(1g\)
    • (no CPE)
    • (no CPE)range: 1.1(3e)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.