CVE-2025-20163— Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability
Quick assessment
Affected
Cisco Cisco Data Center Network Manager
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco Nexus Dashboard Fabric Controller是美国思科（Cisco）公司的一种用于管理 Cisco NX-OS 部署的综合网络管理平台，适用于数据中心的 LAN、SAN 和 IP Fabric for Media (IPFM) 网络 。 Cisco Nexus Dashboard Fabric Controller存在安全漏洞，该漏洞源于SSH主机密钥验证不足，可能导致中间人攻击。
Possible ATT&CK Techniques 3 AI
T1110 · Brute Force T1040 · Network Sniffing T1557 · Adversary-in-the-Middle
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-20163
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to impersonate Cisco NDFC-managed devices.
This vulnerability is due to insufficient SSH host key validation. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on SSH connections to Cisco NDFC-managed devices, which could allow an attacker to intercept this traffic. A successful exploit could allow the attacker to impersonate a managed device and capture user credentials.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
未进行实体认证的密钥交换
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Nexus Dashboard Fabric Controller 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Nexus Dashboard Fabric Controller是美国思科（Cisco）公司的一种用于管理 Cisco NX-OS 部署的综合网络管理平台，适用于数据中心的 LAN、SAN 和 IP Fabric for Media (IPFM) 网络 。 Cisco Nexus Dashboard Fabric Controller存在安全漏洞，该漏洞源于SSH主机密钥验证不足，可能导致中间人攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Data Center Network Manager | 11.2(1) | - |
|
| Cisco | Cisco Nexus Dashboard | 3.1(1k) | - |
|
II. Public POCs for CVE-2025-20163
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-20163
请登录查看更多情报信息。
Same Patch Batch · Cisco · 2025-06-04 · 12 CVEs total
| CVE-2025-20286 | 9.9 CRITICAL | ISE on AWS Static Credential |
| CVE-2025-20261 | 8.8 HIGH | Cisco Integrated Management Controller Privilege Escalation Vulnerability |
| CVE-2025-20273 | 6.1 MEDIUM | Cisco Unified Intelligent Contact Management Enterprise Cross-Site Scripting vulnerability |
| CVE-2025-20278 | 6.0 MEDIUM | Cisco Unified Communications Products Command Injection Vulnerability |
| CVE-2025-20259 | 5.3 MEDIUM | Cisco ThousandEyes Endpoint Agent for Windows Arbitrary File Write Vulnerability |
| CVE-2025-20275 | 5.3 MEDIUM | Cisco Unified Contact Center Express Editor Remote Code Execution Vulnerability |
| CVE-2025-20130 | 4.9 MEDIUM | Cisco Identity Services Engine Access Control Bypass Vulnerability |
| CVE-2025-20279 | 4.8 MEDIUM | Cisco Unifed Contact Center Express Stored Cross-Site Scripting Vulnerability |
| CVE-2025-20129 | 4.3 MEDIUM | Cisco Customer Collaboration Platform Information Disclosure Vulnerability |
| CVE-2025-20276 | 3.8 LOW | Cisco Unified Contact Center Express Remote Code Execution Vulnerability |
| CVE-2025-20277 | 3.4 LOW | Cisco Unified Contact Center Express Path Traversal Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco Data Center Network Manager
-
CVE-2025-20347
Cisco Nexus Dashboard Fabric Controller Unauthorized REST AP -
CVE-2020-3538
Cisco Data Center Network Manager Path Traversal Vulnerabil -
CVE-2020-3539
Cisco Data Center Network Manager Authorization Bypass Vulne -
CVE-2024-20536
Cisco Nexus Dashboard Fabric Controller SQL Injection Vulner -
CVE-2024-20490
Cisco Nexus Dashboard Fabric Controller and Nexus Dashboard
Same vendor: Cisco
-
CVE-2026-76504
Cisco Catalyst SD-WAN Manager System Account Authorization B -
CVE-2026-76426
Cisco ISE REST API SQL Injection Vulnerability -
CVE-2026-20121
CIsco FTD Bypass Access List -
CVE-2026-76431
Cisco Identity Services Engine Arbitrary File Deletion Vulne -
CVE-2026-76427
Cisco ISE XML External Entity Injection Vulnerability
Same weakness: CWE-322
-
CVE-2026-77703
SSH Host Key Verification Bypass in HAVELSAN's Liman Render -
CVE-2026-89422
TLS 1.3 client skips server authentication when ServerHello -
CVE-2026-18654
Disabled SSH host key verification in Amazon AWS CLI EMR hel -
CVE-2026-58065
Apache Airflow Git provider: Git provider hook defaults to S -
CVE-2026-45361
Apache Airflow Google provider: SSH host key verification di
V. Comments for CVE-2025-20163
No comments yet