Description (CNA)
A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to impersonate Cisco NDFC-managed devices. This vulnerability is due to insufficient SSH host key validation. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on SSH connections to Cisco NDFC-managed devices, which could allow an attacker to intercept this traffic. A successful exploit could allow the attacker to impersonate a managed device and capture user credentials.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cisco / Cisco Data Center Network Manager | affected 11.2(1); affected 7.0(2); affected 10.3(2)IPFM; affected 10.1(1); affected 7.2(3); affected 7.2(2); affected 7.2(1); affected 11.0(1); affected 10.4(1); affected 10.2(1); affected 7.2(2a); affected 10.1(2); affected 7.1(1); affected 12.1(1); affected 11.1(1); affected 10.3(1); affected 10.3(1)R(1); affected 7.0(1); affected 10.0(1); affected 7.1(2); affected 11.4(1); affected 10.4(2); affected 11.3(1); affected 11.5(1); affected 11.5(2); affected 11.5(3); affected 12.0.1a; affected 11.5(3a); affected 12.0.2d; affected 12.0.2f; affected 11.5(4); affected 12.1.1; affected 12.1.1e; affected 12.1.1p; affected 12.1.2e; affected 12.1.2p; affected 12.1.3b; affected 12.2.1; affected 12.2.2 |
| Cisco / Cisco Nexus Dashboard | affected 3.1(1k); affected 3.1(1l); affected 3.2(1e); affected 3.2(1i); affected 3.3(1a); affected 3.3(1b); affected 3.3(2b); affected 4.0(1i); affected 3.3(2g) |
CWE
CWE-322
References
ADP enrichment
No English description supplied.
No references supplied.