High severity · published May 7, 2025
CVE-2025-20210
Cisco Catalyst Center Unprotected API Endpoint
7.3
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability in the management API of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to read and modify the outgoing proxy configuration settings.
This vulnerability is due to the lack of authentication in an API endpoint. An attacker could exploit this vulnerability by sending a request to the affected API of a Catalyst Center device. A successful exploit could allow the attacker to view or modify the outgoing proxy configuration, which could disrupt internet traffic from Cisco Catalyst Center or may allow the attacker to intercept outbound internet traffic.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CD
Cisco Digital Network Architecture Center (DNA Center) · Cisco
2.1.1.0; 2.1.1.3; 2.1.2.0; 2.1.2.3; 2.1.2.4; 2.1.2.5; +34 more · source: vendor
CC
Catalyst Center · Cisco
before 2.3.7.9 · source: NVD
Affected product
CD
Cisco Digital Network Architecture Center (DNA Center)
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-20210
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-20210
Vendor Advisory
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-api-nBPZcJCM
More from Cisco Digital Network Architecture Center (DNA Center)
8.8
CVE-2025-20349
Cisco DNA Center API Command Injection Vulnerability
8.8
CVE-2025-20341
Cisco Catalyst Center Privilege Escalation Vulnerability
6.1
CVE-2025-20353
Cisco Catalyst Center Cross-Site Scripting Vulnerability
5.4
CVE-2019-1707
Cisco DNA Center Access Contract Stored Cross-Site Scripting Vulnerability
4.7
CVE-2025-20355
Cisco Catalyst Center Software HTTP Open Redirect Vulnerability
