PT-2025-23819 · Cisco · Cisco Nexus Dashboard Fabric Controller

Harm Blankers + 2 · Published 2025-06-04 · Updated 2025-07-27 · CVE-2025-20163

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco Nexus Dashboard Fabric Controller (NDFC) versions prior to 12.2.3

Description A vulnerability exists in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) due to insufficient SSH host key validation. This allows an unauthenticated, remote attacker to perform a machine-in-the-middle (MitM) attack on SSH connections to Cisco NDFC-managed devices. A successful exploit could allow the attacker to intercept traffic and impersonate a managed device, potentially capturing user credentials.

Recommendations Update Cisco Nexus Dashboard Fabric Controller (NDFC) to version 12.2.3 or later.

Fix

Weakness Enumeration

CWE-322

Related Identifiers

BDU:2025-07448

CVE-2025-20163

Affected Products

Cisco Nexus Dashboard Fabric Controller

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2025-20163 · Security Note
• https://bdu.fstec.ru/vul/2025-07448 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-shkv-snQJtjrp · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-20163 · Vendor Advisory
• https://t.me/cvenotify/129852 · Telegram Post
• https://twitter.com/CveFindCom/status/1930303722153771108 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1930374798627991618 · Twitter Post
• https://t.me/cvetracker/25414 · Telegram Post
• https://twitter.com/fernandokarl/status/1930550551621632471 · Twitter Post
• https://twitter.com/CVEnew/status/1930305587994403238 · Twitter Post
• https://t.me/cveNotify/129852 · Telegram Post