SSH Implementation Vulnerability in Cisco Nexus Dashboard Fabric Controller
CVE-2025-20163
8.7HIGH
What is CVE-2025-20163?
A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) allows unauthenticated remote attackers to impersonate NDFC-managed devices. This issue arises from insufficient validation of SSH host keys, enabling attackers to execute machine-in-the-middle attacks on SSH connections. By exploiting this vulnerability, attackers can intercept traffic intended for managed devices, potentially allowing them to impersonate these devices and capture sensitive user credentials. Addressing this vulnerability is crucial to maintain the integrity and security of Cisco NDFC environments.
Affected Version(s)
Cisco Data Center Network Manager 11.2(1)
Cisco Data Center Network Manager 7.0(2)
Cisco Data Center Network Manager 10.3(2)IPFM