جزئیات آسیب‌پذیری
CVE-2025-20163
Cisco Data Center Network ManagerCisco Nexus Dashboard
Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability
CVSS 3.1
8.7بالا
شرح رسمی (انگلیسی)
A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to impersonate Cisco NDFC-managed devices. This vulnerability is due to insufficient SSH host key validation. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on SSH connections to Cisco NDFC-managed devices, which could allow an attacker to intercept this traffic. A successful exploit could allow the attacker to impersonate a managed device and capture user credentials.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.7بالا | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Cisco | Cisco Data Center Network Manager | 10.0(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 10.1(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 10.1(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 10.2(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 10.3(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 10.3(1)R(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 10.3(2)IPFM | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 10.4(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 10.4(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 11.0(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 11.1(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 11.2(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 11.3(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 11.4(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 11.5(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 11.5(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 11.5(3) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 11.5(3a) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 11.5(4) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 12.0.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 12.0.2d | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 12.0.2f | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 12.1(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 12.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 12.1.1e | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 12.1.1p | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 12.1.2e | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 12.1.2p | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 12.1.3b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 12.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 12.2.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 7.0(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 7.0(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 7.1(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 7.1(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 7.2(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 7.2(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 7.2(2a) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Data Center Network Manager | 7.2(3) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Nexus Dashboard | 3.1(1k) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Nexus Dashboard | 3.1(1l) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Nexus Dashboard | 3.2(1e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Nexus Dashboard | 3.2(1i) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Nexus Dashboard | 3.3(1a) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Nexus Dashboard | 3.3(1b) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Nexus Dashboard | 3.3(2b) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Nexus Dashboard | 3.3(2g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Nexus Dashboard | 4.0(1i) | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۰۳/۱۴
- آخرین به‌روزرسانی
- ۱۴۰۴/۱۲/۰۷
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- cisco
پیش‌بینی بهره‌برداری (EPSS)
۰٫۴۳٪
احتمال بهره‌برداری در ۳۰ روز
۳۷٫۵٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-322Key Exchange without Entity Authentication