CVE-2025-20163

{"id": "CVE-2025-20163", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "psirt@cisco.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.8, "exploitabilityScore": 2.2}]}, "published": "2025-06-04T17:15:26.037", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-shkv-snQJtjrp", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-322"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to impersonate Cisco NDFC-managed devices.\r\n\r\nThis vulnerability is due to insufficient SSH host key validation. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on SSH connections to Cisco NDFC-managed devices, which could allow an attacker to intercept this traffic. A successful exploit could allow the attacker to impersonate a managed device and capture user credentials."}, {"lang": "es", "value": "Una vulnerabilidad en la implementaci\u00f3n SSH de Cisco Nexus Dashboard Fabric Controller (NDFC) podr\u00eda permitir que un atacante remoto no autenticado se haga pasar por dispositivos administrados por Cisco NDFC. Esta vulnerabilidad se debe a una validaci\u00f3n insuficiente de la clave de host SSH. Un atacante podr\u00eda explotar esta vulnerabilidad mediante un ataque de m\u00e1quina en el medio (MCI) en conexiones SSH a dispositivos administrados por Cisco NDFC, lo que podr\u00eda permitirle interceptar este tr\u00e1fico. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante hacerse pasar por un dispositivo administrado y obtener las credenciales del usuario."}], "lastModified": "2025-07-22T16:58:34.137", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:nexus_dashboard:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5913A4DA-CFB5-4FD1-8FD8-A481E5C384C5", "versionEndExcluding": "3.2\\(2f\\)"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@cisco.com"}