A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload and modify files on an affected device. This vulnerability exists due to missing authorization controls on some REST API endpoints. An attacker could exploit this vulnerability by sending crafted API requests to an affected endpoint, potentially allowing limited Administrator functions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5 | CVE-2025-20348 |
Exploitation
To exploit this vulnerability, an attacker must be authenticated with low privileges and send specially crafted API requests to the vulnerable REST API endpoints. This could allow the attacker to access sensitive information or perform limited administrative actions on the affected device.
Affected Products
- Cisco Nexus Dashboard: A management platform for Cisco Nexus switches.
- Cisco Nexus Dashboard Fabric Controller (NDFC): A tool for managing and orchestrating Cisco Nexus fabrics.
Mitigation
To mitigate this vulnerability, it is recommended to implement proper authorization controls on the REST API endpoints and ensure that only authorized users have access to sensitive functions. Regularly updating the software and monitoring API usage can also help in reducing the risk of exploitation.