CVE-2025-20346

A vulnerability in Cisco Catalyst Center could allow an authenticated, remote attacker to execute operations that should require Administrator privileges. The attacker would need valid read-only user credentials. This vulnerability is due to improper role-based access control (RBAC). An attacker could exploit this vulnerability by logging in to an affected system and modifying certain policy configurations. A successful exploit could allow the attacker to modify policy configurations that are reserved for the Administrator role. To exploit this vulnerability, the attacker must have valid credentials for a user account with at least the role of Observer.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-privesc-catc-rYjReeLU	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*

History

07 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad en Cisco Catalyst Center podría permitir a un atacante remoto autenticado ejecutar operaciones que deberían requerir privilegios de Administrador. El atacante necesitaría credenciales de usuario válidas de solo lectura. Esta vulnerabilidad se debe a un control de acceso basado en roles (RBAC) inadecuado. Un atacante podría explotar esta vulnerabilidad iniciando sesión en un sistema afectado y modificando ciertas configuraciones de política. Un exploit exitoso podría permitir al atacante modificar configuraciones de política que están reservadas para el rol de Administrador. Para explotar esta vulnerabilidad, el atacante debe tener credenciales válidas para una cuenta de usuario con al menos el rol de Observador.

Information

Published : 2025-11-13 17:15

Updated : 2026-10-07 21:10

NVD link : CVE-2025-20346

Mitre link : CVE-2025-20346

CVE.ORG link : CVE-2025-20346

JSON object : View

Products Affected

cisco

catalyst_center

CWE

CWE-269

Improper Privilege Management

NVD-CWE-noinfo

{"id": "CVE-2025-20346", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-20346", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-11-14T04:55:38.854695Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Cisco", "product": "Cisco Digital Network Architecture Center (DNA Center)", "versions": [{"status": "affected", "version": "2.1.1.0"}, {"status": "affected", "version": "2.1.1.3"}, {"status": "affected", "version": "2.1.2.0"}, {"status": "affected", "version": "2.1.2.3"}, {"status": "affected", "version": "2.1.2.5"}, {"status": "affected", "version": "2.2.1.0"}, {"status": "affected", "version": "2.1.2.6"}, {"status": "affected", "version": "2.2.2.0"}, {"status": "affected", "version": "2.2.2.3"}, {"status": "affected", "version": "2.1.2.7"}, {"status": "affected", "version": "2.2.1.3"}, {"status": "affected", "version": "2.2.3.0"}, {"status": "affected", "version": "2.2.2.4"}, {"status": "affected", "version": "2.2.2.5"}, {"status": "affected", "version": "2.2.3.3"}, {"status": "affected", "version": "2.2.2.7"}, {"status": "affected", "version": "2.2.2.6"}, {"status": "affected", "version": "2.2.2.8"}, {"status": "affected", "version": "2.2.3.4"}, {"status": "affected", "version": "2.3.2.1"}, {"status": "affected", "version": "2.3.2.1-AIRGAP"}, {"status": "affected", "version": "2.3.2.1-AIRGAP-CA"}, {"status": "affected", "version": "2.2.3.5"}, {"status": "affected", "version": "2.3.3.3"}, {"status": "affected", "version": "2.3.3.1-AIRGAP"}, {"status": "affected", "version": "2.3.3.1"}, {"status": "affected", "version": "2.3.2.3"}, {"status": "affected", "version": "2.3.3.3-AIRGAP"}, {"status": "affected", "version": "2.2.2.9"}, {"status": "affected", "version": "2.3.3.0-AIRGAP"}, {"status": "affected", "version": "2.3.3.4"}, {"status": "affected", "version": "2.3.3.4-AIRGAP"}, {"status": "affected", "version": "2.3.3.4-AIRGAP-MDNAC"}, {"status": "affected", "version": "2.3.3.5"}, {"status": "affected", "version": "2.3.3.5-AIRGAP"}, {"status": "affected", "version": "2.3.4.0-AIRGAP"}, {"status": "affected", "version": "2.3.4.3"}, {"status": "affected", "version": "2.3.4.3-AIRGAP"}, {"status": "affected", "version": "2.3.3.6"}, {"status": "affected", "version": "2.3.3.6-AIRGAP"}, {"status": "affected", "version": "2.3.3.6-AIRGAP-MDNAC"}, {"status": "affected", "version": "2.3.5.0-AIRGAP-MDNAC"}, {"status": "affected", "version": "VA Launchpad 1.0.3"}, {"status": "affected", "version": "VA Launchpad 1.0.4"}, {"status": "affected", "version": "2.3.3.7"}, {"status": "affected", "version": "2.3.3.7-AIRGAP"}, {"status": "affected", "version": "2.3.3.7-AIRGAP-MDNAC"}, {"status": "affected", "version": "2.3.6.0"}, {"status": "affected", "version": "2.3.3.6-70045-HF1"}, {"status": "affected", "version": "VA Launchpad 1.2.1"}, {"status": "affected", "version": "2.3.3.7-72328-AIRGAP"}, {"status": "affected", "version": "2.3.3.7-72323"}, {"status": "affected", "version": "2.3.3.7-72328-MDNAC"}, {"status": "affected", "version": "2.3.5.3"}, {"status": "affected", "version": "2.3.5.3-AIRGAP-MDNAC"}, {"status": "affected", "version": "2.3.5.3-AIRGAP"}, {"status": "affected", "version": "2.3.6.0-AIRGAP"}, {"status": "affected", "version": "VA Launchpad 1.3.0"}, {"status": "affected", "version": "VA Launchpad 1.5.0"}, {"status": "affected", "version": "2.3.7.0"}, {"status": "affected", "version": "2.3.7.0-AIRGAP"}, {"status": "affected", "version": "2.3.7.0-AIRGAP-MDNAC"}, {"status": "affected", "version": "2.3.7.0-VA"}, {"status": "affected", "version": "2.3.5.4-AIRGAP"}, {"status": "affected", "version": "2.3.5.4-AIRGAP-MDNAC"}, {"status": "affected", "version": "VA Launchpad 1.6.0"}, {"status": "affected", "version": "2.3.7.3"}, {"status": "affected", "version": "2.3.7.3-AIRGAP"}, {"status": "affected", "version": "2.3.7.3-AIRGAP-MDNAC"}, {"status": "affected", "version": "VA Launchpad 1.7.0"}, {"status": "affected", "version": "2.3.5.5-AIRGAP"}, {"status": "affected", "version": "2.3.5.5"}, {"status": "affected", "version": "2.3.5.5-AIRGAP-MDNAC"}, {"status": "affected", "version": "2.3.7.4"}, {"status": "affected", "version": "2.3.7.4-AIRGAP"}, {"status": "affected", "version": "2.3.7.5-AIRGAP"}, {"status": "affected", "version": "VA Launchpad 1.9.0"}, {"status": "affected", "version": "2.3.5.6-AIRGAP"}, {"status": "affected", "version": "2.3.5.6-AIRGAP-MDNAC"}, {"status": "affected", "version": "1.0.0.0"}, {"status": "affected", "version": "Cisco CCGM 1.0.0.0"}, {"status": "affected", "version": "2.3.7.6-AIRGAP"}, {"status": "affected", "version": "2.3.7.6"}, {"status": "affected", "version": "2.3.7.6-VA"}, {"status": "affected", "version": "2.3.5.5-70026-HF70"}, {"status": "affected", "version": "2.3.5.5-70026-HF51"}, {"status": "affected", "version": "2.3.5.6-70143-HF20"}, {"status": "affected", "version": "2.3.7.6-AIRGAP-MDNAC"}, {"status": "affected", "version": "2.3.5.5-70026-HF53"}, {"status": "affected", "version": "2.3.5.5-70026-HF71"}, {"status": "affected", "version": "2.3.7.7"}, {"status": "affected", "version": "2.3.7.7-VA"}, {"status": "affected", "version": "2.3.7.7-AIRGAP"}, {"status": "affected", "version": "2.3.7.7-AIRGAP-MDNAC"}, {"status": "affected", "version": "2.3.7.9-VA"}, {"status": "affected", "version": "2.3.7.9"}, {"status": "affected", "version": "2.3.7.9-AIRGAP"}, {"status": "affected", "version": "2.3.7.9-AIRGAP-MDNAC"}, {"status": "affected", "version": "Cisco CCGM 1.1.1"}, {"status": "affected", "version": "2.3.7.9-70301-GSMU10"}, {"status": "affected", "version": "2.3.7.9-70301-SMU1"}, {"status": "affected", "version": "2.3.7.9-75403-SMU10"}, {"status": "affected", "version": "2.3.7.9-75403-GSMU10"}, {"status": "affected", "version": "Cisco CCGM 1.2.1"}, {"status": "affected", "version": "2.3.5.3-EULA"}, {"status": "affected", "version": "2.3.7.9.75403.10-VA"}, {"status": "affected", "version": "0.0.0.0"}, {"status": "affected", "version": "1.16.54"}], "defaultStatus": "unknown"}]}], "published": "2025-11-13T17:15:45.630", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-privesc-catc-rYjReeLU", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-269"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in Cisco Catalyst Center could allow an authenticated, remote attacker to execute operations that should require Administrator privileges. The attacker would need valid read-only user credentials.\r\n\r\nThis vulnerability is due to improper role-based access control (RBAC). An attacker could exploit this vulnerability by logging in to an affected system and modifying certain policy configurations. A successful exploit could allow the attacker to modify policy configurations that are reserved for the Administrator role. To exploit this vulnerability, the attacker must have valid credentials for a user account with at least the role of Observer."}, {"lang": "es", "value": "Una vulnerabilidad en Cisco Catalyst Center podr\u00eda permitir a un atacante remoto autenticado ejecutar operaciones que deber\u00edan requerir privilegios de Administrador. El atacante necesitar\u00eda credenciales de usuario v\u00e1lidas de solo lectura.\n\nEsta vulnerabilidad se debe a un control de acceso basado en roles (RBAC) inadecuado. Un atacante podr\u00eda explotar esta vulnerabilidad iniciando sesi\u00f3n en un sistema afectado y modificando ciertas configuraciones de pol\u00edtica. Un exploit exitoso podr\u00eda permitir al atacante modificar configuraciones de pol\u00edtica que est\u00e1n reservadas para el rol de Administrador. Para explotar esta vulnerabilidad, el atacante debe tener credenciales v\u00e1lidas para una cuenta de usuario con al menos el rol de Observador."}], "lastModified": "2026-10-07T21:10:00.200", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C88A587-FFF4-493C-823F-F958374FC6B6", "versionEndExcluding": "2.3.7.10"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@cisco.com"}