CVE-2020-3391: cisco cisco digital network architecture center (dna center)

Vulnerability summary

CVE-2020-3391 is a medium (CVSS 6.5) vulnerability in cisco cisco digital network architecture center (dna center). EPSS estimates a 1.31% chance of exploitation in the next 30 days, higher than 70.1% of scored vulnerabilities.

Timeline

1. 02-07-2020
   PublishedVulnerability first disclosed.
2. 15-11-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to view sensitive information in clear text. The vulnerability is due to insecure storage of certain unencrypted credentials on an affected device. An attacker could exploit this vulnerability by viewing the network device configuration and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to use those credentials to discover and manage network devices.

• CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
• CWE-522Insufficiently Protected CredentialsThe product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.