CVE-2020-3391
Medium
Description
A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to view sensitive information in clear text. The vulnerability is due to insecure storage of certain unencrypted credentials on an affected device. An attacker could exploit this vulnerability by viewing the network device configuration and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to use those credentials to discover and manage network devices.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Cisco Digital Network Architecture Center
PublishedJul 2, 2020
First seenJul 2, 2020
Weakness typeCWE-200Sensitive information exposure
How to fix
Update
- cisco digital_network_architecture_center1.2.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco digital_network_architecture_center | v < 1.2.10 | 1.2.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.