Cisco DNA Center Software API Vulnerabilities
CVE-2023-20184

5.4MEDIUM

Key Information:

Vendor
Cisco
Status
Cisco Digital Network Architecture Center (dna Center)
Vendor
CVE Published:
18 May 2023

Badges

👾 Exploit Exists

Summary

Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands in a restricted container as the root user. For more information about these vulnerabilities, see the Details section of this advisory.

Affected Version(s)

Cisco Digital Network Architecture Center (DNA Center)

References

https://sec.cloudapps.cisco.com/security/center/content/C...
vendor-advisory

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.