CVE-2026-20042
Full vulnerability record from the local CVENow database.
Description
A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or Config-only backup files to access sensitive information. This vulnerability exists because authentication details are included in the encrypted backup files. An attacker with a valid backup file and encryption password from an affected device could decrypt the backup file. The attacker could then use the authentication details in the backup file to access internal-only APIs on the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.
Severity
MEDIUM
CVSS score
6.5
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-04-01 17:28:26.173000
Last modified
2026-10-26 22:10:00.163000
View original CVE JSON
{
"id": "CVE-2026-20042",
"sourceIdentifier": "[email protected]",
"published": "2026-04-01T17:28:26.173",
"lastModified": "2026-10-26T22:10:00.163",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or Config-only backup files to access sensitive information.\r\n\r\nThis vulnerability exists because authentication details are included in the encrypted backup files. An attacker with a valid backup file and encryption password from an affected device could decrypt the backup file. The attacker could then use the authentication details in the backup file to access internal-only APIs on the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la función de copia de seguridad de la configuración de Cisco Nexus Dashboard podría permitir a un atacante que tenga la contraseña de cifrado y acceso a los archivos de copia de seguridad completos (Full) o solo de configuración (Config-only) acceder a información sensible.\n\nEsta vulnerabilidad existe porque los detalles de autenticación están incluidos en los archivos de copia de seguridad cifrados. Un atacante con un archivo de copia de seguridad válido y la contraseña de cifrado de un dispositivo afectado podría descifrar el archivo de copia de seguridad. El atacante podría entonces usar los detalles de autenticación en el archivo de copia de seguridad para acceder a las API solo internas en el dispositivo afectado. Un exploit exitoso podría permitir al atacante ejecutar comandos arbitrarios en el sistema operativo subyacente como el usuario root."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco Nexus Dashboard",
"defaultStatus": "unknown",
"versions": [
{
"version": "1.1(3e)",
"status": "affected"
},
{
"version": "1.1(3c)",
"status": "affected"
},
{
"version": "1.1(3d)",
"status": "affected"
},
{
"version": "1.1(0d)",
"status": "affected"
},
{
"version": "1.1(2i)",
"status": "affected"
},
{
"version": "2.0(1b)",
"status": "affected"
},
{
"version": "1.1(2h)",
"status": "affected"
},
{
"version": "1.1(0c)",
"status": "affected"
},
{
"version": "1.1(3f)",
"status": "affected"
},
{
"version": "2.1(1d)",
"status": "affected"
},
{
"version": "2.1(1e)",
"status": "affected"
},
{
"version": "2.0(2g)",
"status": "affected"
},
{
"version": "2.0(2h)",
"status": "affected"
},
{
"version": "2.1(2d)",
"status": "affected"
},
{
"version": "2.0(1d)",
"status": "affected"
},
{
"version": "2.2(1h)",
"status": "affected"
},
{
"version": "2.2(1e)",
"status": "affected"
},
{
"version": "2.2(2d)",
"status": "affected"
},
{
"version": "2.1(2f)",
"status": "affected"
},
{
"version": "2.3(1c)",
"status": "affected"
},
{
"version": "2.3(2b)",
"status": "affected"
},
{
"version": "2.3(2c)",
"status": "affected"
},
{
"version": "2.3(2d)",
"status": "affected"
},
{
"version": "2.3(2e)",
"status": "affected"
},
{
"version": "3.0(1f)",
"status": "affected"
},
{
"version": "3.0(1i)",
"status": "affected"
},
{
"version": "3.1(1k)",
"status": "affected"
},
{
"version": "3.1(1l)",
"status": "affected"
},
{
"version": "3.2(1e)",
"status": "affected"
},
{
"version": "3.2(1i)",
"status": "affected"
},
{
"version": "3.3(1a)",
"status": "affected"
},
{
"version": "3.3(1b)",
"status": "affected"
},
{
"version": "3.3(2b)",
"status": "affected"
},
{
"version": "4.0(1i)",
"status": "affected"
},
{
"version": "3.3(2g)",
"status": "affected"
},
{
"version": "3.2(2f)",
"status": "affected"
},
{
"version": "3.2(2g)",
"status": "affected"
},
{
"version": "3.2(2m)",
"status": "affected"
},
{
"version": "3.1(1n)",
"status": "affected"
},
{
"version": "4.1(1g)",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.2,
"impactScore": 5.2
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-04-01T00:00:00+00:00",
"id": "CVE-2026-20042",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-295"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:nexus_dashboard:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.2.1",
"matchCriteriaId": "0045E301-38B4-4B35-96E4-A3F0F844AE3B"
}
]
}
]
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nd-cbid-5YqkOSHu",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}