Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-20163

Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to impersonate Cisco NDFC-managed devices. This vulnerability is due to insufficient SSH host key validation. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on SSH connections to Cisco NDFC-managed devices, which could allow an attacker to intercept this traffic. A successful exploit could allow the attacker to impersonate a managed device and capture user credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Data Center Network Manager

Default version status: unknown

  • 11.2(1)affected
  • 7.0(2)affected
  • 10.3(2)IPFMaffected
  • 10.1(1)affected
  • 7.2(3)affected
  • 7.2(2)affected
  • 7.2(1)affected
  • 11.0(1)affected
  • 10.4(1)affected
  • 10.2(1)affected
  • 7.2(2a)affected
  • 10.1(2)affected
  • 7.1(1)affected
  • 12.1(1)affected
  • 11.1(1)affected
  • 10.3(1)affected
  • 10.3(1)R(1)affected
  • 7.0(1)affected
  • 10.0(1)affected
  • 7.1(2)affected
  • 11.4(1)affected
  • 10.4(2)affected
  • 11.3(1)affected
  • 11.5(1)affected
  • 11.5(2)affected
  • 11.5(3)affected
  • 12.0.1aaffected
  • 11.5(3a)affected
  • 12.0.2daffected
  • 12.0.2faffected
  • 11.5(4)affected
  • 12.1.1affected
  • 12.1.1eaffected
  • 12.1.1paffected
  • 12.1.2eaffected
  • 12.1.2paffected
  • 12.1.3baffected
  • 12.2.1affected
  • 12.2.2affected

Cisco Cisco Nexus Dashboard

Default version status: unknown

  • 3.1(1k)affected
  • 3.1(1l)affected
  • 3.2(1e)affected
  • 3.2(1i)affected
  • 3.3(1a)affected
  • 3.3(1b)affected
  • 3.3(2b)affected
  • 4.0(1i)affected
  • 3.3(2g)affected

References