Product:
Cisco Catalyst Center
Summary
A vulnerability in Cisco Catalyst Center could allow an authenticated, remote attacker to execute operations that should require Administrator privileges. This vulnerability is due to improper role-based access control. An attacker could exploit this vulnerability by logging in to an affected system and modifying certain policy configurations reserved for the Administrator role.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2025-20346 |
Exploitation
To exploit this vulnerability, an attacker must have valid credentials for a user account with at least the role of Observer. Once logged in, the attacker can modify policy configurations that should only be accessible to users with Administrator privileges, potentially leading to unauthorized changes in the system.
Affected Products
- Cisco Catalyst Center: Affected by improper role-based access control allowing unauthorized policy modifications.
Mitigation
To mitigate this vulnerability, it is recommended to review user roles and permissions within the Cisco Catalyst Center. Ensure that only authorized users have access to Administrator-level functions and consider implementing additional security measures to monitor and restrict access.