Access Control Flaw in Cisco Catalyst Center
CVE-2025-20346
4.3MEDIUM
What is CVE-2025-20346?
A vulnerability exists in Cisco Catalyst Center that permits authenticated, remote attackers to perform actions typically restricted to Administrator privileges. This issue is rooted in improper role-based access control (RBAC), which could be exploited by an attacker with valid read-only user credentials, specifically those with the Observer role. By leveraging this vulnerability, the attacker can alter policy configurations designated for the Administrator role, thereby gaining unauthorized access to sensitive operations within the system.
Affected Version(s)
Cisco Digital Network Architecture Center (DNA Center) 2.1.1.0
Cisco Digital Network Architecture Center (DNA Center) 2.1.1.3
Cisco Digital Network Architecture Center (DNA Center) 2.1.2.0