CVE-2025-20210
Last modified
CVE-2025-20210 is a high-severity vulnerability rated 7.3/10 on the CVSS scale. A vulnerability in the management API of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to read and modify the outgoing proxy configuration settings. This vulnerability is due to the lack of authentication in an API endpoint. An attacker could exploit this vulnerability by sending a request to the affected API of a Catalyst Center device. EPSS estimates a 0.35% chance of exploitation in the next 30 days.
Description
A vulnerability in the management API of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to read and modify the outgoing proxy configuration settings. This vulnerability is due to the lack of authentication in an API endpoint. An attacker could exploit this vulnerability by sending a request to the affected API of a Catalyst Center device. A successful exploit could allow the attacker to view or modify the outgoing proxy configuration, which could disrupt internet traffic from Cisco Catalyst Center or may allow the attacker to intercept outbound internet traffic.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Catalyst Center | < 2.3.7.9 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-20210?
How severe is CVE-2025-20210?
How do I fix CVE-2025-20210?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-20205Multiple vulnerabilities in the web-based management interfa…4.8
- CVE-2025-20206A vulnerability in the interprocess communication (IPC) chan…7.8
- CVE-2025-20207A vulnerability in Simple Network Management Protocol (SNMP)…4.3
- CVE-2025-20208A vulnerability in the web-based management interface of Cis…5.4
- CVE-2025-20209A vulnerability in the Internet Key Exchange version 2 (IKEv…7.5
- CVE-2025-2021Ashlar-Vellum Cobalt XE File Parsing Integer Overflow Remote…7.8
- CVE-2025-20211A vulnerability in the web-based management interface of Cis…6.1
- CVE-2025-20212A vulnerability in the Cisco AnyConnect VPN server of Cisco …7.7
- CVE-2025-20213A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager,…5.5
- CVE-2025-20214A vulnerability in the Network Configuration Access Control …4.3
- CVE-2025-20215A vulnerability in the meeting-join functionality of Cisco W…5.4
- CVE-2025-20216A vulnerability in the web interface of Cisco Catalyst SD-WA…4.3
Are you affected by CVE-2025-20210?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST