Cisco Nexus Dashboard version 4.2.1 contains improper access control vulnerabilities grouped under CWE-284. These issues were discovered internally by Cisco's engineering team during a comprehensive security review. The vulnerability allows unauthorized or insufficiently authorized access, potentially compromising confidentiality, integrity, and availability of the system. The CVSS 3.1 base score is 9.9 with vector AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, indicating network attack vector, low attack complexity, low privileges required, no user interaction, scope changed, and high impact on confidentiality, integrity, and availability.

The vulnerability can lead to a complete compromise of the Cisco Nexus Dashboard, affecting confidentiality, integrity, and availability of the system. Given the CVSS score of 9.9, successful exploitation could allow attackers to gain unauthorized access and control, potentially disrupting network management and operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Cisco has indicated a software hardening release addressing multiple vulnerabilities, but no explicit patch or update details are provided in the available data. Users should monitor Cisco's official advisories for updates and apply any released patches promptly.