Catalyst Center vulnerabilities
6 known vulnerabilities in Catalyst Center from Cisco. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Cisco Catalyst Center: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vuln
- 8.8 High severity
Cisco Digital Network Architecture Center (DNA…: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the REST API of Cisco Catalyst Center could allow an authenticated, remote attacker to execute arbitrary commands in a restricted container as the root user. This vulnerability is due to insufficient validation of user-supplied input in REST
- 7.3 High severity
Cisco Digital Network Architecture Center (DNA…: Missing Authentication for Critical Functionality
A vulnerability in the management API of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to read and modify the outgoing proxy configuration settings. This vulnerability is due to the lack of authentication in
- 8.1 High severity
Cisco Digital Network Architecture Center (DNA…: Use of Hard-coded Cryptographic Key
A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance. This vulnerability is due to the presence of a static SSH host key. An atta
- 8.8 High severity
Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated…
Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands in a restricted container as the root user
- 8.8 High severity
Cisco Digital Network Architecture Center (DNA…: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability in the management API of Cisco DNA Center could allow an authenticated, remote attacker to elevate privileges in the context of the web-based management interface on an affected device. This vulnerability is due to the unintended exposure of se