Riskcovery

CVE-2026-5944

Cisco Intersight Device Connector for Nutanix Prism Central Unauthenticated API Access

State
Published
Severity
6.7 Medium
Published
Apr 28, 2026
Updated
Apr 28, 2026
Reserved
Apr 9, 2026

Read the record on cve.org

Description

An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The service exposes an API passthrough endpoint on TCP port 7373 that is accessible within the network scope of the deployment environment without authentication.

An unauthenticated attacker with network access can exploit this vulnerability by sending crafted requests to the exposed endpoint to enumerate cluster metadata, including virtual machine information and cluster configuration details. While the API primarily supports read-only operations, it also allows certain cluster maintenance workflows to be invoked.

Although this vulnerability does not allow persistent modification of system configurations or access to credentials or sensitive user data, successful exploitation may result in disruption of active workloads, leading to loss of service availability within the affected environment.

Scores

CVSSScoreVectorSource
4.06.7 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/S:N/AU:N/R:U/V:C/RE:L/U:AmberNutanix
3.18.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:HNutanix
2.08.5 HighAV:N/AC:L/Au:N/C:P/I:N/A:CNutanix

Weaknesses

  • CWE-306 Missing authentication for critical function
  • CWE-862 Missing Authorization

Affected Products

ProductVersions
Cisco Intersight Device Connector for Prism CentralNutanix
  • 4.3.0 to before 7.5.1Affectedfrom 7.5.1Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.