← Back to CVE Explorer

CVE-2026-5944

Full vulnerability record from the local CVENow database.

Description

An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The service exposes an API passthrough endpoint on TCP port 7373 that is accessible within the network scope of the deployment environment without authentication. An unauthenticated attacker with network access can exploit this vulnerability by sending crafted requests to the exposed endpoint to enumerate cluster metadata, including virtual machine information and cluster configuration details. While the API primarily supports read-only operations, it also allows certain cluster maintenance workflows to be invoked. Although this vulnerability does not allow persistent modification of system configurations or access to credentials or sensitive user data, successful exploitation may result in disruption of active workloads, leading to loss of service availability within the affected environment.

Severity
MEDIUM
CVSS score
6.7 (v4.0)
Vulnerability status
Analyzed
Source identifier
2ffdacf6-8681-47df-b023-4f11abd61c1d
Published
2026-04-28 14:16:13.853000
Last modified
2026-10-26 22:10:00.163000
View original CVE JSON 
{
  "id": "CVE-2026-5944",
  "sourceIdentifier": "2ffdacf6-8681-47df-b023-4f11abd61c1d",
  "published": "2026-04-28T14:16:13.853",
  "lastModified": "2026-10-26T22:10:00.163",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The service exposes an API passthrough endpoint on TCP port 7373 that is accessible within the network scope of the deployment environment without authentication.\n\n\n\nAn unauthenticated attacker with network access can exploit this vulnerability by sending crafted requests to the exposed endpoint to enumerate cluster metadata, including virtual machine information and cluster configuration details. While the API primarily supports read-only operations, it also allows certain cluster maintenance workflows to be invoked.\n\n\n\nAlthough this vulnerability does not allow persistent modification of system configurations or access to credentials or sensitive user data, successful exploitation may result in disruption of active workloads, leading to loss of service availability within the affected environment."
    },
    {
      "lang": "es",
      "value": "Existe una vulnerabilidad de control de acceso inadecuado en el Cisco Intersight Device Connector para Nutanix Prism Central. El servicio expone un endpoint de passthrough de API en el puerto TCP 7373 que es accesible dentro del alcance de red del entorno de despliegue sin autenticación.\n\nUn atacante no autenticado con acceso a la red puede explotar esta vulnerabilidad enviando solicitudes manipuladas al endpoint expuesto para enumerar metadatos del clúster, incluyendo información de la máquina virtual y detalles de configuración del clúster. Si bien la API soporta principalmente operaciones de solo lectura, también permite invocar ciertos flujos de trabajo de mantenimiento del clúster.\n\nAunque esta vulnerabilidad no permite la modificación persistente de las configuraciones del sistema o el acceso a credenciales o datos de usuario sensibles, la explotación exitosa puede resultar en la interrupción de cargas de trabajo activas, lo que lleva a la pérdida de disponibilidad del servicio dentro del entorno afectado."
    }
  ],
  "affected": [
    {
      "source": "2ffdacf6-8681-47df-b023-4f11abd61c1d",
      "affectedData": [
        {
          "vendor": "Nutanix",
          "product": "Cisco Intersight Device Connector for Prism Central",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "4.3.0",
              "lessThan": "7.5.1",
              "versionType": "custom",
              "status": "affected",
              "changes": [
                {
                  "at": "7.5.1",
                  "status": "unaffected"
                }
              ]
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV40": [
      {
        "source": "2ffdacf6-8681-47df-b023-4f11abd61c1d",
        "type": "Secondary",
        "cvssData": {
          "version": "4.0",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:C/RE:L/U:Amber",
          "baseScore": 6.7,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "vulnConfidentialityImpact": "LOW",
          "vulnIntegrityImpact": "NONE",
          "vulnAvailabilityImpact": "HIGH",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "subAvailabilityImpact": "NONE",
          "exploitMaturity": "UNREPORTED",
          "confidentialityRequirement": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "Safety": "NEGLIGIBLE",
          "Automatable": "NO",
          "Recovery": "USER",
          "valueDensity": "CONCENTRATED",
          "vulnerabilityResponseEffort": "LOW",
          "providerUrgency": "AMBER"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "source": "2ffdacf6-8681-47df-b023-4f11abd61c1d",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
          "baseScore": 8.2,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 4.2
      }
    ],
    "cvssMetricV2": [
      {
        "source": "2ffdacf6-8681-47df-b023-4f11abd61c1d",
        "type": "Secondary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:C",
          "baseScore": 8.5,
          "accessVector": "NETWORK",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "availabilityImpact": "COMPLETE"
        },
        "baseSeverity": "HIGH",
        "exploitabilityScore": 10.0,
        "impactScore": 7.8,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "ssvcV203": [
      {
        "source": "2ffdacf6-8681-47df-b023-4f11abd61c1d",
        "ssvcData": {
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CNA",
          "version": "2.0.3"
        }
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-04-28T14:14:48.970984Z",
          "id": "CVE-2026-5944",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "2ffdacf6-8681-47df-b023-4f11abd61c1d",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-306"
        },
        {
          "lang": "en",
          "value": "CWE-862"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:intersight_device_connector:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "4.3.0",
              "versionEndIncluding": "7.5.0",
              "matchCriteriaId": "B8DF903A-BC2C-432E-BC3C-FF339EDF16D6"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://download.nutanix.com/alerts/Security_Advisory_0046.pdf",
      "source": "2ffdacf6-8681-47df-b023-4f11abd61c1d",
      "tags": [
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://portal.nutanix.com/page/documents/list?type=software&filterKey=software&filterVal=Prism",
      "source": "2ffdacf6-8681-47df-b023-4f11abd61c1d",
      "tags": [
        "Product",
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://www.nutanix.com/support",
      "source": "2ffdacf6-8681-47df-b023-4f11abd61c1d",
      "tags": [
        "Product",
        "Third Party Advisory"
      ]
    }
  ]
}