Product: Cisco NX-OS Software
Summary
A vulnerability in the logging feature of Cisco NX-OS Software for various Cisco Nexus and UCS series could allow an authenticated, local attacker to access sensitive information. This issue arises from improper logging of sensitive data, enabling attackers to exploit it by accessing log files. A successful exploit could lead to the exposure of sensitive information, including stored credentials.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-20290 |
Exploitation
To exploit this vulnerability, an authenticated local attacker would need to access the log files stored on the file system of the affected devices. By doing so, they could retrieve sensitive information that may include stored credentials, thereby compromising the security of the system.
Affected Products
- Cisco Nexus 3000 Series Switches: Affected by improper logging of sensitive information.
- Cisco Nexus 9000 Series Switches (standalone NX-OS mode): Vulnerable to local attacks accessing log files.
- Cisco UCS 6400 Fabric Interconnects: Susceptible to information exposure through log file access.
- Cisco UCS 6500 Series Fabric Interconnects: Can be exploited by accessing sensitive log data.
- Cisco UCS 9108 100G Fabric Interconnects: Vulnerable to local attacks that exploit logging issues.
Mitigation
To mitigate this vulnerability, it is recommended that users restrict access to log files and ensure that only authorized personnel can view sensitive information. Additionally, keeping the software updated and applying any available patches from Cisco can help protect against potential exploits.