Cisco Digital Network Architecture Center vulnerabilities

CVE-2018-15386 [CRITICAL] CWE-16 CVE-2018-15386: A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, r A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and have direct unauthorized access to critical management functions. The vulnerability is due to an insecure default configuration of the affected system. An attacker could exploit this vulnerability by direct

CVE-2025-20349 [HIGH] CWE-78 CVE-2025-20349: A vulnerability in the REST API of Cisco Catalyst Center could allow an authenticated, remote attack A vulnerability in the REST API of Cisco Catalyst Center could allow an authenticated, remote attacker to execute arbitrary commands in a restricted container as the root user. This vulnerability is due to insufficient validation of user-supplied input in REST API request parameters. An attacker could exploit this vulnerability by sending a crafted AP

CVE-2025-20341 [HIGH] CWE-284 CVE-2025-20341: A vulnerability in Cisco Catalyst Center Virtual Appliance could allow an authenticated, remote atta A vulnerability in Cisco Catalyst Center Virtual Appliance could allow an authenticated, remote attacker to elevate privileges to Administrator on an affected system. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted HTTP request to an affected system. A s

CVE-2018-0448 [CRITICAL] CWE-326 CVE-2018-0448: A vulnerability in the identity management service of Cisco Digital Network Architecture (DNA) Cente A vulnerability in the identity management service of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and take complete control of identity management functions. The vulnerability is due to insufficient security restrictions for critical management functions. An attacker could

CVE-2021-1264 [HIGH] CWE-78 CVE-2021-1264: A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated, remote A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient input validation by the Command Runner tool. An attacker could exploit this vulnerability by providing crafted input during command execution or via a crafted command r

CVE-2023-20055 [HIGH] CWE-200 CVE-2023-20055: A vulnerability in the management API of Cisco DNA Center could allow an authenticated, remote attac A vulnerability in the management API of Cisco DNA Center could allow an authenticated, remote attacker to elevate privileges in the context of the web-based management interface on an affected device. This vulnerability is due to the unintended exposure of sensitive information. An attacker could exploit this vulnerability by inspecting the responses

CVE-2023-20182 [HIGH] CWE-285 CVE-2023-20182: Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remot Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands in a restricted container as the root user. For more information about these vulnerabilities, see the Details section of this advisory.

CVE-2021-1303 [HIGH] CWE-266 CVE-2021-1303: A vulnerability in the user management roles of Cisco DNA Center could allow an authenticated, remot A vulnerability in the user management roles of Cisco DNA Center could allow an authenticated, remote attacker to execute unauthorized commands on an affected device. The vulnerability is due to improper enforcement of actions for assigned user roles. An attacker could exploit this vulnerability by authenticating as a user with an Observer role and exec

CVE-2019-1841 [HIGH] CWE-441 CVE-2019-1841: A vulnerability in the Software Image Management feature of Cisco DNA Center could allow an authenti A vulnerability in the Software Image Management feature of Cisco DNA Center could allow an authenticated, remote attacker to access to internal services without additional authentication. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending arbitrary HTTP requests to interna

CVE-2019-1848 [CRITICAL] CWE-668 CVE-2019-1848: A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, a A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, adjacent attacker to bypass authentication and access critical internal services. The vulnerability is due to insufficient access restriction to ports necessary for system operation. An attacker could exploit this vulnerability by connecting an unautho

CVE-2023-20223 [HIGH] CWE-284 CVE-2023-20223: A vulnerability in Cisco DNA Center could allow an unauthenticated, remote attacker to read and modi A vulnerability in Cisco DNA Center could allow an unauthenticated, remote attacker to read and modify data in a repository that belongs to an internal service on an affected device. This vulnerability is due to insufficient access control enforcement on API requests. An attacker could exploit this vulnerability by sending a crafted API request to an

CVE-2020-3281 [HIGH] CWE-532 CVE-2020-3281: A vulnerability in the audit logging component of Cisco Digital Network Architecture (DNA) Center co A vulnerability in the audit logging component of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to view sensitive information in clear text. The vulnerability is due to the storage of certain unencrypted credentials. An attacker could exploit this vulnerability by accessing the audit logs and obtaining cre

CVE-2024-20350 [HIGH] CWE-321 CVE-2024-20350: A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow a A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on SSH co

CVE-2020-3411 [HIGH] CWE-200 CVE-2020-3411: A vulnerability in Cisco DNA Center software could allow an unauthenticated remote attacker access t A vulnerability in Cisco DNA Center software could allow an unauthenticated remote attacker access to sensitive information on an affected system. The vulnerability is due to improper handling of authentication tokens by the affected software. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A success

CVE-2025-20210 [HIGH] CWE-306 CVE-2025-20210: A vulnerability in the management API of Cisco Catalyst Center, formerly Cisco DNA Center, could all A vulnerability in the management API of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to read and modify the outgoing proxy configuration settings. This vulnerability is due to the lack of authentication in an API endpoint. An attacker could exploit this vulnerability by sending a request to the af

CVE-2021-1257 [HIGH] CWE-352 CVE-2021-1257: A vulnerability in the web-based management interface of Cisco DNA Center Software could allow an un A vulnerability in the web-based management interface of Cisco DNA Center Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to manipulate an authenticated user into executing malicious actions without their awareness or consent. The vulnerability is due to insufficient CSRF protections for the

CVE-2019-15253 [MEDIUM] CWE-79 CVE-2019-15253: A vulnerability in the web-based management interface of Cisco Digital Network Architecture (DNA) Ce A vulnerability in the web-based management interface of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied in

CVE-2021-1134 [HIGH] CWE-295 CVE-2021-1134: A vulnerability in the Cisco Identity Services Engine (ISE) integration feature of the Cisco DNA Cen A vulnerability in the Cisco Identity Services Engine (ISE) integration feature of the Cisco DNA Center Software could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to an incomplete validation of the X.509 certificate used when establishing a connection between DNA Center and an ISE ser

CVE-2021-1265 [MEDIUM] CWE-312 CVE-2021-1265: A vulnerability in the configuration archive functionality of Cisco DNA Center could allow any privi A vulnerability in the configuration archive functionality of Cisco DNA Center could allow any privilege-level authenticated, remote attacker to obtain the full unmasked running configuration of managed devices. The vulnerability is due to the configuration archives files being stored in clear text, which can be retrieved by various API calls. An atta

CVE-2020-3391 [MEDIUM] CWE-200 CVE-2020-3391: A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an authenticated, rem A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to view sensitive information in clear text. The vulnerability is due to insecure storage of certain unencrypted credentials on an affected device. An attacker could exploit this vulnerability by viewing the network device configuration and