CVE-2020-3411
High
Description
A vulnerability in Cisco DNA Center software could allow an unauthenticated remote attacker access to sensitive information on an affected system. The vulnerability is due to improper handling of authentication tokens by the affected software. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker access to sensitive device information, which includes configuration files.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Cisco Catalyst Center
PublishedAug 17, 2020
First seenAug 17, 2020
Weakness typeCWE-200Sensitive information exposure
How to fix
Update
- cisco catalyst_center1.3.1.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco catalyst_center | 1.3 ≤ v < 1.3.1.4 | 1.3.1.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.