6.5 Medium

CVE-2020-3391 A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to view…

Description

A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to view sensitive information in clear text. The vulnerability is due to insecure storage of certain unencrypted credentials on an affected device. An attacker could exploit this vulnerability by viewing the network device configuration and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to use those credentials to discover and manage network devices.

Affected products and versions

Product	Affected versions	Fixed in
Cisco Digital Network Architecture Center (DNA Center)	Versions not published

References

20200701 Cisco Digital Network Architecture Center Information Disclosure Vulnerability tools.cisco.com

Timeline

Published July 2, 2020
Last modified November 15, 2024

The 33 CVEs of Cisco Digital Network Architecture Center (DNA Center) →

CVE-2025-20346 A vulnerability in Cisco Catalyst Center could allow an authenticated, remote attacker to execute operations that should… 4.3 Medium CVE-2025-20355 A vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance could allow an… 4.7 Medium CVE-2025-20353 A vulnerability in the web-based management interface of Cisco Catalyst Center could allow an unauthenticated, remote… 6.1 Medium CVE-2025-20341 A vulnerability in Cisco Catalyst Center Virtual Appliance could allow an authenticated, remote attacker to elevate… 8.8 High

Track this CVE