Cisco Digital Network Architecture Center (DNA Center) vulnerabilities
7 known vulnerabilities in Cisco Digital Network Architecture Center (DNA Center) from Cisco. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Cisco Digital Network Architecture Center (DNA…: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the REST API of Cisco Catalyst Center could allow an authenticated, remote attacker to execute arbitrary commands in a restricted container as the root user. This vulnerability is due to insufficient validation of user-supplied input in REST
- 8.8 High severity
Cisco Digital Network Architecture Center (DNA…: Improper Access Control
A vulnerability in Cisco Catalyst Center Virtual Appliance could allow an authenticated, remote attacker to elevate privileges to Administrator on an affected system. This vulnerability is due to insufficient validation of user-supplied input. An attacker coul
- 7.3 High severity
Cisco Digital Network Architecture Center (DNA…: Missing Authentication for Critical Functionality
A vulnerability in the management API of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to read and modify the outgoing proxy configuration settings. This vulnerability is due to the lack of authentication in
- 8.1 High severity
Cisco Digital Network Architecture Center (DNA…: Use of Hard-coded Cryptographic Key
A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance. This vulnerability is due to the presence of a static SSH host key. An atta
- 8.2 High severity
Cisco Digital Network Architecture Center (DNA…: Improper Access Control
A vulnerability in Cisco DNA Center could allow an unauthenticated, remote attacker to read and modify data in a repository that belongs to an internal service on an affected device. This vulnerability is due to insufficient access control enforcement on API r
- 8.8 High severity
Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated…
Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands in a restricted container as the root user
- 8.8 High severity
Cisco Digital Network Architecture Center (DNA…: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability in the management API of Cisco DNA Center could allow an authenticated, remote attacker to elevate privileges in the context of the web-based management interface on an affected device. This vulnerability is due to the unintended exposure of se