What’s Vulnerable › Vulnerabilities

CVE-2023-20183: Cisco DNA Center Software API Vulnerabilities

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-05-18 · updated 2026-06-17
• Weakness: CWE-285

Description

Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands in a restricted container as the root user. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products

• Cisco Digital Network Architecture Center (DNA Center): before 2.3.3.7; from 2.3.4 before 2.3.5.3 — fixed in 2.3.3.7, 2.3.5.3

How to fix

Upgrade to a fixed version: Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7, 2.3.5.3. Check the vendor advisory for mitigations.

References

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-multiple-kTQkGU3
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-multiple-kTQkGU3

Get alerted when CVE-2023-20183 or the next vulnerability affects your stack