vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2025-20349

Cisco DNA Center API Command Injection Vulnerability

HIGH
8.8
CVSS Score
Published: November 13, 2025 at 04:18 PM UTC
Updated: October 7, 2026 at 09:10 PM UTC
1 product affected across 1 vendorCatalyst Center

Using Cisco Digital Network Architecture Center (DNA Center) by Cisco?

Get instant alerts when new vulnerabilities affect Cisco Digital Network Architecture Center (DNA Center) - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH8.8
Exploit prediction
EPSS 0.4%
SSVC
No known exploit

Description

A vulnerability in the REST API of Cisco Catalyst Center could allow an authenticated, remote attacker to execute arbitrary commands in a restricted container as the root user. This vulnerability is due to insufficient validation of user-supplied input in REST API request parameters. An attacker could exploit this vulnerability by sending a crafted API request to an affected device. A successful exploit could allow the attacker to inject arbitrary commands that would then be executed in a restricted container with root privileges. To exploit this vulnerability, the attacker must have valid credentials for a user account with at least the role of Observer.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Catalyst Center· Cisco
95%
v < 2.3.7.100.0.0.01.0.0.01.4.0.02.1.1.02.1.1.32.1.2.02.1.2.32.1.2.42.1.2.52.1.2.62.1.2.72.1.2.82.2.1.02.2.1.32.2.2.02.2.2.12.2.2.32.2.2.42.2.2.52.2.2.62.2.2.72.2.2.82.2.2.92.2.3.02.2.3.32.2.3.42.2.3.52.2.3.62.3.2.12.3.2.1-AIRGAP2.3.2.1-AIRGAP-CA2.3.2.32.3.3.02.3.3.0-AIRGAP2.3.3.12.3.3.1-AIRGAP2.3.3.32.3.3.3-AIRGAP2.3.3.3-AIRGAP-CA2.3.3.42.3.3.4-AIRGAP2.3.3.4-AIRGAP-MDNAC2.3.3.4-HF12.3.3.52.3.3.5-AIRGAP2.3.3.62.3.3.6-70045-HF12.3.3.6-AIRGAP2.3.3.6-AIRGAP-MDNAC2.3.3.72.3.3.7-723232.3.3.7-72328-AIRGAP2.3.3.7-72328-MDNAC2.3.3.7-AIRGAP2.3.3.7-AIRGAP-MDNAC2.3.4.02.3.4.0-AIRGAP2.3.4.32.3.4.3-AIRGAP2.3.5.02.3.5.0-AIRGAP2.3.5.0-AIRGAP-MDNAC2.3.5.32.3.5.3-AIRGAP2.3.5.3-AIRGAP-MDNAC2.3.5.3-EULA2.3.5.42.3.5.4-AIRGAP2.3.5.4-AIRGAP-MDNAC2.3.5.52.3.5.5-70026-HF512.3.5.5-70026-HF522.3.5.5-70026-HF532.3.5.5-70026-HF702.3.5.5-70026-HF712.3.5.5-70026-HF722.3.5.5-AIRGAP2.3.5.5-AIRGAP-MDNAC2.3.5.62.3.5.6-70143-HF202.3.5.6-AIRGAP2.3.5.6-AIRGAP-MDNAC2.3.6.02.3.6.0-AIRGAP2.3.7.02.3.7.0-AIRGAP2.3.7.0-AIRGAP-MDNAC2.3.7.0-VA2.3.7.32.3.7.3-AIRGAP2.3.7.3-AIRGAP-MDNAC2.3.7.42.3.7.4-AIRGAP2.3.7.4-AIRGAP-MDNAC2.3.7.5-AIRGAP2.3.7.5-VA2.3.7.62.3.7.6-AIRGAP2.3.7.6-AIRGAP-MDNAC2.3.7.6-VA2.3.7.72.3.7.7-AIRGAP2.3.7.7-AIRGAP-MDNAC2.3.7.7-VA2.3.7.92.3.7.9-70301-SMU12.3.7.9-AIRGAP2.3.7.9-AIRGAP-MDNAC2.3.7.9-VA

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

Vendor Advisory
Source: cverecord
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-ci-ZWLQVSwT

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.8HIGH[email protected]
Attack Vector
NETWORK
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-78

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card