Vulnerability in Cisco Data Center Network Manager
CVE-2025-20163
A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to impersonate Cisco NDFC-managed devices. This vulnerability is due to insufficient SSH host ke…
EPSS: 0.001 (28.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.7 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N.
Affected products
- Cisco Data Center Network Manager — versions 11.2(1), 7.0(2), 10.3(2)IPFM
- Cisco Nexus Dashboard — versions 3.1(1k), 3.1(1l), 3.2(1e)
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-20163?
- CVE-2025-20163 is a high-severity vulnerability in Cisco Data Center Network Manager, classified under Key Exchange without Entity Authentication. CVSS score: 8.7/10. Published 2025-06-04.
- How severe is CVE-2025-20163?
- High severity. CVSS v3 base score is 8.7 out of 10.