PT-2020-3066 · Cisco · Cisco Digital Network Architecture (Dna) Center

Published 2020-07-02 · Updated 2021-08-06 · CVE-2020-3391

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Digital Network Architecture (DNA) Center (affected versions not specified)

Description A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to view sensitive information in clear text. The issue is due to insecure storage of certain unencrypted credentials on an affected device. An attacker could exploit this by viewing the network device configuration and obtaining credentials they may not normally have access to, potentially allowing them to discover and manage network devices.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Insufficiently Protected Credentials

Weakness Enumeration

CWE-200

CWE-522

Related Identifiers

BDU:2020-03357

CVE-2020-3391

Affected Products

Cisco Digital Network Architecture (Dna) Center

References · 6

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-info-disc-6xsCyDYy · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-03357 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3391 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3391 · Security Note
• https://t.me/cvenotify/18808 · Telegram Post
• https://t.me/cvenotify/4795 · Telegram Post