Cisco Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerability

published 2025-08-27 14 mo ago modified 2026-06-17 4 mo ago also EUVD-2025-25939

cvss: 5.4; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.3%; EPSS 0.3% chance of exploitation in 30 days, percentile 17%
public exploits: 0; none known

A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload and modify files on an affected device.

This vulnerability exists because of missing authorization controls on some REST API endpoints. An attacker could exploit th vulnerability by sending crafted API requests to an affected endpoint. A successful exploit could allow the attacker to perform limited Administrator functions, such as accessing sensitive information regarding HTTP Proxy and NTP configurations, uploading images, and damaging image files on an affected device.

Patch / fix

fixed in 1

cisco nexus_dashboard 4.1\(1g\)

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: partial
Assessed: 14 mo ago (2025-08-27)

Exploit prediction

0.26% chance of exploitation in the next 30 days, higher than 17% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	5.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

Cisco Cisco Data Center Network Manager

Classification

Weakness

CWE-693 Protection Mechanism Failure

References

sec.cloudapps.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-nshs-urapi-gJuBVFpu
vendor-advisory

Sources

CVE List CVE-2025-20347
NVD CVE-2025-20347

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary