Lucene search

CiscoCVE-2020-3391

HistoryJul 02, 2020 - 5:15 a.m.

CVE-2020-3391

2020-07-0205:15:11

CWE-522

CWE-200

cisco

web.nvd.nist.gov

cisco

dna center

vulnerability

cve-2020-3391

authentication

remote attacker

sensitive information

network device configuration

credentials

exploit

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.3

Confidence

High

EPSS

0.002

Percentile

51.8%

JSON

A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to view sensitive information in clear text. The vulnerability is due to insecure storage of certain unencrypted credentials on an affected device. An attacker could exploit this vulnerability by viewing the network device configuration and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to use those credentials to discover and manage network devices.

Affected configurations

Nvd

Node

ciscodigital_network_architecture_centerRange<1.2.10

VendorProductVersionCPE
ciscodigital_network_architecture_center*cpe:2.3:a:cisco:digital_network_architecture_center:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	digital_network_architecture_center	*	cpe:2.3:a:cisco:digital_network_architecture_center::::::::

CNA Affected

[
  {
    "product": "Cisco Digital Network Architecture Center (DNA Center)",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-info-disc-6xsCyDYy

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.3

Confidence

High

EPSS

0.002

Percentile

51.8%

JSON

Related for CVE-2020-3391