CVE-2025-20163

Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability

State: Published
Severity: 8.7 High
Published: Jun 4, 2025
Updated: Feb 26, 2026
Reserved: Oct 10, 2024

Description

A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to impersonate Cisco NDFC-managed devices.

This vulnerability is due to insufficient SSH host key validation. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on SSH connections to Cisco NDFC-managed devices, which could allow an attacker to intercept this traffic. A successful exploit could allow the attacker to impersonate a managed device and capture user credentials.

Scores

CVSS	Score	Vector	Source
3.1	8.7 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N	cisco

Weaknesses

CWE-322 Key Exchange without Entity Authentication

Affected Products

Product	Versions
Cisco Data Center Network ManagerCisco	11.2(1)Affected 7.0(2)Affected 10.3(2)IPFMAffected 10.1(1)Affected 7.2(3)Affected 7.2(2)Affected 7.2(1)Affected 11.0(1)Affected 10.4(1)Affected 10.2(1)Affected 7.2(2a)Affected 10.1(2)Affected 7.1(1)Affected 12.1(1)Affected 11.1(1)Affected 10.3(1)Affected 10.3(1)R(1)Affected 7.0(1)Affected 10.0(1)Affected 7.1(2)Affected 11.4(1)Affected 10.4(2)Affected 11.3(1)Affected 11.5(1)Affected 11.5(2)Affected and 14 more versions
Cisco Nexus DashboardCisco	3.1(1k)Affected 3.1(1l)Affected 3.2(1e)Affected 3.2(1i)Affected 3.3(1a)Affected 3.3(1b)Affected 3.3(2b)Affected 4.0(1i)Affected 3.3(2g)Affected

Product

Versions

Cisco Data Center Network ManagerCisco

11.2(1)Affected
7.0(2)Affected
10.3(2)IPFMAffected
10.1(1)Affected
7.2(3)Affected
7.2(2)Affected
7.2(1)Affected
11.0(1)Affected
10.4(1)Affected
10.2(1)Affected
7.2(2a)Affected
10.1(2)Affected
7.1(1)Affected
12.1(1)Affected
11.1(1)Affected
10.3(1)Affected
10.3(1)R(1)Affected
7.0(1)Affected
10.0(1)Affected
7.1(2)Affected
11.4(1)Affected
10.4(2)Affected
11.3(1)Affected
11.5(1)Affected
11.5(2)Affected
and 14 more versions

Cisco Nexus DashboardCisco

3.1(1k)Affected
3.1(1l)Affected
3.2(1e)Affected
3.2(1i)Affected
3.3(1a)Affected
3.3(1b)Affected
3.3(2b)Affected
4.0(1i)Affected
3.3(2g)Affected

References

cisco-sa-ndfc-shkv-snQJtjrp

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.