CVE-2025-20210

Cisco Catalyst Center Unprotected API Endpoint

State: Published
Severity: 7.3 High
Published: May 7, 2025
Updated: May 7, 2025
Reserved: Oct 10, 2024

Description

A vulnerability in the management API of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to read and modify the outgoing proxy configuration settings.

This vulnerability is due to the lack of authentication in an API endpoint. An attacker could exploit this vulnerability by sending a request to the affected API of a Catalyst Center device. A successful exploit could allow the attacker to view or modify the outgoing proxy configuration, which could disrupt internet traffic from Cisco Catalyst Center or may allow the attacker to intercept outbound internet traffic.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L	cisco

Weaknesses

CWE-306 Missing Authentication for Critical Function

Affected Products

Product	Versions
Cisco Digital Network Architecture Center (DNA Center)Cisco	2.1.1.0Affected 2.1.1.3Affected 2.1.2.0Affected 2.1.2.3Affected 2.1.2.4Affected 2.1.2.5Affected 2.2.1.0Affected 2.1.2.6Affected 2.2.2.0Affected 2.2.2.1Affected 2.2.2.3Affected 2.1.2.7Affected 2.2.1.3Affected 2.2.3.0Affected 2.2.2.4Affected 2.2.2.5Affected 2.2.3.3Affected 2.2.2.7Affected 2.2.2.6Affected 2.2.2.8Affected 2.2.3.4Affected 2.1.2.8Affected 2.3.2.1Affected 2.3.2.1-AIRGAPAffected 2.3.2.1-AIRGAP-CAAffected and 75 more versions

Product

Versions

Cisco Digital Network Architecture Center (DNA Center)Cisco

2.1.1.0Affected
2.1.1.3Affected
2.1.2.0Affected
2.1.2.3Affected
2.1.2.4Affected
2.1.2.5Affected
2.2.1.0Affected
2.1.2.6Affected
2.2.2.0Affected
2.2.2.1Affected
2.2.2.3Affected
2.1.2.7Affected
2.2.1.3Affected
2.2.3.0Affected
2.2.2.4Affected
2.2.2.5Affected
2.2.3.3Affected
2.2.2.7Affected
2.2.2.6Affected
2.2.2.8Affected
2.2.3.4Affected
2.1.2.8Affected
2.3.2.1Affected
2.3.2.1-AIRGAPAffected
2.3.2.1-AIRGAP-CAAffected
and 75 more versions

References

cisco-sa-dnac-api-nBPZcJCM

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.