๐Ÿ” CVE Alert

CVE-2023-20184

MEDIUM 5.4

Cisco DNA Center Software API Vulnerabilities

CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th

Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands in a restricted container as the root user. For more information about these vulnerabilities, see the Details section of this advisory.

CWE CWE-285
Vendor cisco
Product cisco digital network architecture center (dna center)
Ecosystems
Industries
NetworkingTelecommunications
Published May 18, 2023
Last Updated Oct 25, 2024
Stay Ahead of the Next One

Get instant alerts for cisco cisco digital network architecture center (dna center)

Be the first to know when new medium vulnerabilities affecting cisco cisco digital network architecture center (dna center) are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None

Affected Versions

Cisco / Cisco Digital Network Architecture Center (DNA Center)
n/a

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
sec.cloudapps.cisco.com: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-multiple-kTQkGU3