ورود / ثبت‌نام

جزئیات آسیب‌پذیری

CVE-2025-20210

Cisco Digital Network Architecture Center

Cisco Catalyst Center Unprotected API Endpoint

CVSS 3.1
7.3بالا

شرح رسمی (انگلیسی)

A vulnerability in the management API of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to read and modify the outgoing proxy configuration settings. This vulnerability is due to the lack of authentication in an API endpoint. An attacker could exploit this vulnerability by sending a request to the affected API of a Catalyst Center device. A successful exploit could allow the attacker to view or modify the outgoing proxy configuration, which could disrupt internet traffic from Cisco Catalyst Center or may allow the attacker to intercept outbound internet traffic.

امتیازهای CVSS

امتیازنسخهمنبعبردار
7.3بالا 3.1 CVEProject cvelistV5 (CNA) (cisco) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.1.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.1.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.6 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.8 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.1.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.1.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.6 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.8 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.9 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.6 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.2.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.2.1-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.2.1-AIRGAP-CA CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.2.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.0-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.1-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.3-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.3-AIRGAP-CA CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.4-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.4-AIRGAP-MDNAC CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.4-HF1 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.5-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.6 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.6-70045-HF1 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.6-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.6-AIRGAP-MDNAC CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-72323 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-72328-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-72328-MDNAC CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-AIRGAP-MDNAC CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.4.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.4.0-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.4.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.4.3-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.0-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.0-AIRGAP-MDNAC CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.3-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.3-AIRGAP-MDNAC CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.4-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.4-AIRGAP-MDNAC CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF51 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF52 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF53 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF70 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF71 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF72 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-AIRGAP-MDNAC CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.6 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.6-70143-HF20 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.6-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.6-AIRGAP-MDNAC CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.6.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.6.0-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.0-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.0-AIRGAP-MDNAC CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.0-VA CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.3-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.3-AIRGAP-MDNAC CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.4-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.4-AIRGAP-MDNAC CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.5-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.5-VA CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.6 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.6-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.6-AIRGAP-MDNAC CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.6-VA CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.7-AIRGAP CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.7-AIRGAP-MDNAC CVEProject cvelistV5 (CNA)
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.7-VA CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۴/۰۲/۱۷
آخرین به‌روزرسانی
۱۴۰۴/۰۲/۱۷
وضعیت
منتشرشده
صادرکننده (CNA)
cisco

پیش‌بینی بهره‌برداری (EPSS)

۰٫۴۱٪
احتمال بهره‌برداری در ۳۰ روز
۳۶٫۳٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
بله
وضعیت بهره‌برداری
ندارد
اثر فنی
کامل

ضعف‌ها (CWE)

  • CWE-306
    Missing Authentication for Critical Function