A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload and modify files on an affected device. This vulnerability exists due to missing authorization controls on some REST API endpoints. An attacker could exploit this vulnerability by sending crafted API requests to an affected endpoint, potentially allowing limited Administrator functions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.4 | CVE-2025-20347 |
Exploitation
To exploit this vulnerability, an attacker must be authenticated and have low privileges. They can send specially crafted API requests to the vulnerable REST API endpoints, which may allow them to access sensitive information or perform unauthorized actions, such as uploading or modifying files.
Affected Products
- Cisco Nexus Dashboard: A management platform for Cisco Nexus switches.
- Cisco Nexus Dashboard Fabric Controller (NDFC): A tool for managing and orchestrating Cisco Nexus fabric networks.
Mitigation
To mitigate this vulnerability, it is recommended to implement proper authorization controls on the affected REST API endpoints. Additionally, keeping the software updated and monitoring for unusual API activity can help reduce the risk of exploitation.