{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-20163", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2024-10-10T19:15:13.217Z", "datePublished": "2025-06-04T16:17:44.257Z", "dateUpdated": "2025-06-05T03:55:23.894Z"}, "containers": {"cna": {"title": "Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability", "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "baseScore": 8.7, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE"}}], "descriptions": [{"lang": "en", "value": "A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to impersonate Cisco NDFC-managed devices.\r\n\r\nThis vulnerability is due to insufficient SSH host key validation. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on SSH connections to Cisco NDFC-managed devices, which could allow an attacker to intercept this traffic. A successful exploit could allow the attacker to impersonate a managed device and capture user credentials."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-shkv-snQJtjrp", "name": "cisco-sa-ndfc-shkv-snQJtjrp"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "source": {"advisory": "cisco-sa-ndfc-shkv-snQJtjrp", "discovery": "EXTERNAL", "defects": ["CSCwm50501"]}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "Key Exchange without Entity Authentication", "type": "cwe", "cweId": "CWE-322"}]}], "affected": [{"vendor": "Cisco", "product": "Cisco Data Center Network Manager", "versions": [{"version": "11.2(1)", "status": "affected"}, {"version": "7.0(2)", "status": "affected"}, {"version": "10.3(2)IPFM", "status": "affected"}, {"version": "10.1(1)", "status": "affected"}, {"version": "7.2(3)", "status": "affected"}, {"version": "7.2(2)", "status": "affected"}, {"version": "7.2(1)", "status": "affected"}, {"version": "11.0(1)", "status": "affected"}, {"version": "10.4(1)", "status": "affected"}, {"version": "10.2(1)", "status": "affected"}, {"version": "7.2(2a)", "status": "affected"}, {"version": "10.1(2)", "status": "affected"}, {"version": "7.1(1)", "status": "affected"}, {"version": "12.1(1)", "status": "affected"}, {"version": "11.1(1)", "status": "affected"}, {"version": "10.3(1)", "status": "affected"}, {"version": "10.3(1)R(1)", "status": "affected"}, {"version": "7.0(1)", "status": "affected"}, {"version": "10.0(1)", "status": "affected"}, {"version": "7.1(2)", "status": "affected"}, {"version": "11.4(1)", "status": "affected"}, {"version": "10.4(2)", "status": "affected"}, {"version": "11.3(1)", "status": "affected"}, {"version": "11.5(1)", "status": "affected"}, {"version": "11.5(2)", "status": "affected"}, {"version": "11.5(3)", "status": "affected"}, {"version": "12.0.1a", "status": "affected"}, {"version": "11.5(3a)", "status": "affected"}, {"version": "12.0.2d", "status": "affected"}, {"version": "12.0.2f", "status": "affected"}, {"version": "11.5(4)", "status": "affected"}, {"version": "12.1.1", "status": "affected"}, {"version": "12.1.1e", "status": "affected"}, {"version": "12.1.1p", "status": "affected"}, {"version": "12.1.2e", "status": "affected"}, {"version": "12.1.2p", "status": "affected"}, {"version": "12.1.3b", "status": "affected"}, {"version": "12.2.1", "status": "affected"}, {"version": "12.2.2", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco Nexus Dashboard", "versions": [{"version": "3.1(1k)", "status": "affected"}, {"version": "3.1(1l)", "status": "affected"}, {"version": "3.2(1e)", "status": "affected"}, {"version": "3.2(1i)", "status": "affected"}, {"version": "3.3(1a)", "status": "affected"}, {"version": "3.3(1b)", "status": "affected"}, {"version": "3.3(2b)", "status": "affected"}, {"version": "4.0(1i)", "status": "affected"}, {"version": "3.3(2g)", "status": "affected"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2025-06-04T16:17:44.257Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-06-04T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2025-20163"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-05T03:55:23.894Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-20163", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-06-04T18:13:15.315472Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-04T18:13:16.615Z"}}], "cna": {"title": "Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability", "source": {"defects": ["CSCwm50501"], "advisory": "cisco-sa-ndfc-shkv-snQJtjrp", "discovery": "EXTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Data Center Network Manager", "versions": [{"status": "affected", "version": "11.2(1)"}, {"status": "affected", "version": "7.0(2)"}, {"status": "affected", "version": "10.3(2)IPFM"}, {"status": "affected", "version": "10.1(1)"}, {"status": "affected", "version": "7.2(3)"}, {"status": "affected", "version": "7.2(2)"}, {"status": "affected", "version": "7.2(1)"}, {"status": "affected", "version": "11.0(1)"}, {"status": "affected", "version": "10.4(1)"}, {"status": "affected", "version": "10.2(1)"}, {"status": "affected", "version": "7.2(2a)"}, {"status": "affected", "version": "10.1(2)"}, {"status": "affected", "version": "7.1(1)"}, {"status": "affected", "version": "12.1(1)"}, {"status": "affected", "version": "11.1(1)"}, {"status": "affected", "version": "10.3(1)"}, {"status": "affected", "version": "10.3(1)R(1)"}, {"status": "affected", "version": "7.0(1)"}, {"status": "affected", "version": "10.0(1)"}, {"status": "affected", "version": "7.1(2)"}, {"status": "affected", "version": "11.4(1)"}, {"status": "affected", "version": "10.4(2)"}, {"status": "affected", "version": "11.3(1)"}, {"status": "affected", "version": "11.5(1)"}, {"status": "affected", "version": "11.5(2)"}, {"status": "affected", "version": "11.5(3)"}, {"status": "affected", "version": "12.0.1a"}, {"status": "affected", "version": "11.5(3a)"}, {"status": "affected", "version": "12.0.2d"}, {"status": "affected", "version": "12.0.2f"}, {"status": "affected", "version": "11.5(4)"}, {"status": "affected", "version": "12.1.1"}, {"status": "affected", "version": "12.1.1e"}, {"status": "affected", "version": "12.1.1p"}, {"status": "affected", "version": "12.1.2e"}, {"status": "affected", "version": "12.1.2p"}, {"status": "affected", "version": "12.1.3b"}, {"status": "affected", "version": "12.2.1"}, {"status": "affected", "version": "12.2.2"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco Nexus Dashboard", "versions": [{"status": "affected", "version": "3.1(1k)"}, {"status": "affected", "version": "3.1(1l)"}, {"status": "affected", "version": "3.2(1e)"}, {"status": "affected", "version": "3.2(1i)"}, {"status": "affected", "version": "3.3(1a)"}, {"status": "affected", "version": "3.3(1b)"}, {"status": "affected", "version": "3.3(2b)"}, {"status": "affected", "version": "4.0(1i)"}, {"status": "affected", "version": "3.3(2g)"}], "defaultStatus": "unknown"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-shkv-snQJtjrp", "name": "cisco-sa-ndfc-shkv-snQJtjrp"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to impersonate Cisco NDFC-managed devices.\r\n\r\nThis vulnerability is due to insufficient SSH host key validation. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on SSH connections to Cisco NDFC-managed devices, which could allow an attacker to intercept this traffic. A successful exploit could allow the attacker to impersonate a managed device and capture user credentials."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-322", "description": "Key Exchange without Entity Authentication"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2025-06-04T16:17:44.257Z"}}}, "cveMetadata": {"cveId": "CVE-2025-20163", "state": "PUBLISHED", "dateUpdated": "2025-06-04T18:20:12.290Z", "dateReserved": "2024-10-10T19:15:13.217Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2025-06-04T16:17:44.257Z", "assignerShortName": "cisco"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:nexus_dashboard:*:*:*:*:*:*:*:*", "matchCriteriaId": "5913A4DA-CFB5-4FD1-8FD8-A481E5C384C5", "versionEndExcluding": "3.2\\(2f\\)", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to impersonate Cisco NDFC-managed devices.\r\n\r\nThis vulnerability is due to insufficient SSH host key validation. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on SSH connections to Cisco NDFC-managed devices, which could allow an attacker to intercept this traffic. A successful exploit could allow the attacker to impersonate a managed device and capture user credentials."}, {"lang": "es", "value": "Una vulnerabilidad en la implementaci\u00f3n SSH de Cisco Nexus Dashboard Fabric Controller (NDFC) podr\u00eda permitir que un atacante remoto no autenticado se haga pasar por dispositivos administrados por Cisco NDFC. Esta vulnerabilidad se debe a una validaci\u00f3n insuficiente de la clave de host SSH. Un atacante podr\u00eda explotar esta vulnerabilidad mediante un ataque de m\u00e1quina en el medio (MCI) en conexiones SSH a dispositivos administrados por Cisco NDFC, lo que podr\u00eda permitirle interceptar este tr\u00e1fico. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante hacerse pasar por un dispositivo administrado y obtener las credenciales del usuario."}], "id": "CVE-2025-20163", "lastModified": "2025-07-22T16:58:34.137", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 5.8, "source": "psirt@cisco.com", "type": "Primary"}]}, "published": "2025-06-04T17:15:26.037", "references": [{"source": "psirt@cisco.com", "tags": ["Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-shkv-snQJtjrp"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-322"}], "source": "psirt@cisco.com", "type": "Primary"}]}

{}