Cisco DNA Center API Command Injection Vulnerability_CVE-2025-20349

6.3 / 10

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

A vulnerability in the REST API of Cisco Catalyst Center could allow an authenticated, remote attacker to execute arbitrary commands in a restricted container as the root user.

This vulnerability is due to insufficient validation of user-supplied input in REST API request parameters. An attacker could exploit this vulnerability by sending a crafted API request to an affected device. A successful exploit could allow the attacker to inject arbitrary commands that would then be executed in a restricted container with root privileges. To exploit this vulnerability, the attacker must have valid credentials for a user account with at least the role of Observer.

Basic Information

ID CVE-2025-20349

Source cisco

Published Nov 13, 2025 at 16:18

Modified Nov 13, 2025 at 17:10

Affected Product

Vendor Cisco

Product Cisco Digital Network Architecture Center (DNA Center)

Version 1.4.0.0

Affected Versions Cisco Cisco Digital Network Architecture Center (DNA Center) 1.4.0.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.1.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.1.3
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.3
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.4
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.5
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.1.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.6
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.1
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.3
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.7
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.1.3
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.4
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.5
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.3
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.7
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.6
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.8
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.4
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.8
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.2.1
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.2.1-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.2.1-AIRGAP-CA
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.5
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.3
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.1-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.1
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.2.3
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.3-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.6
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.9
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.0-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.3-AIRGAP-CA
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.4
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.4-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.4-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.4-HF1
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.4.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.5
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.5-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.4.0-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.4.3
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.4.3-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.6
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.6-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.0-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.6-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.0-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.6.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.6-70045-HF1
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-72328-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-72323
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-72328-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.3
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.3-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.3-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.6.0-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.0-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.0-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.0-VA
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.4
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.4-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.4-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.3
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.3-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.3-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.4
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.4-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.4-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.5-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.5-VA
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.6-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.6
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.6-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 1.0.0.0
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.6-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.6
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.6-VA
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF70
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF51
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.6-70143-HF20
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.6-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF52
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF53
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF71
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.7
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.7-VA
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.7-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.7-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF72
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9-VA
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9-AIRGAP
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9-AIRGAP-MDNAC
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9-70301-SMU1
Cisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.3-EULA
Cisco Cisco Digital Network Architecture Center (DNA Center) 0.0.0.0

References

sec.cloudapps.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-ci-ZWLQVSwT

{
    "lastseen": "",
    "description": "A vulnerability in the REST API of Cisco Catalyst Center could allow an authenticated, remote attacker to execute arbitrary commands in a restricted container as the root user.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input in REST API request parameters. An attacker could exploit this vulnerability by sending a crafted API request to an affected device. A successful exploit could allow the attacker to inject arbitrary commands that would then be executed in a restricted container with root privileges. To exploit this vulnerability, the attacker must have valid credentials for a user account with at least the role of Observer.",
    "published": "2025-11-13T16:18:03.689Z",
    "modified": "2025-11-13T17:10:31.415Z",
    "type": "cve",
    "title": "Cisco DNA Center API Command Injection Vulnerability",
    "source": "cisco",
    "references": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-ci-ZWLQVSwT",
    "id": "CVE-2025-20349",
    "bulletinFamily": "",
    "cwe": null,
    "cvelist": null,
    "sourceData": "Cisco Cisco Digital Network Architecture Center (DNA Center) 1.4.0.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.1.1.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.1.1.3\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.3\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.4\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.5\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.1.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.6\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.1\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.3\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.7\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.1.3\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.4\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.5\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.3\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.7\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.6\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.8\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.4\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.1.2.8\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.2.1\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.2.1-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.2.1-AIRGAP-CA\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.5\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.3\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.1-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.1\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.2.3\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.3-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.3.6\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.2.2.9\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.0-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.3-AIRGAP-CA\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.4\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.4-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.4-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.4-HF1\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.4.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.5\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.5-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.4.0-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.4.3\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.4.3-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.6\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.6-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.0-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.6-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.0-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.6.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.6-70045-HF1\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-72328-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-72323\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.3.7-72328-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.3\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.3-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.3-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.6.0-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.0-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.0-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.0-VA\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.4\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.4-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.4-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.3\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.3-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.3-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.4\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.4-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.4-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.5-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.5-VA\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.6-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.6\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.6-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 1.0.0.0\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.6-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.6\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.6-VA\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF70\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF51\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.6-70143-HF20\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.6-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF52\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF53\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF71\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.7\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.7-VA\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.7-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.7-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.5-70026-HF72\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9-VA\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9-AIRGAP\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9-AIRGAP-MDNAC\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.7.9-70301-SMU1\nCisco Cisco Digital Network Architecture Center (DNA Center) 2.3.5.3-EULA\nCisco Cisco Digital Network Architecture Center (DNA Center) 0.0.0.0",
    "sourceHref": "",
    "cvss": {
        "score": 6.3,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Cisco Digital Network Architecture Center (DNA Center)",
    "version": "1.4.0.0",
    "vendor": "Cisco",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}

Description

Basic Information

Affected Product

References

💭 Join the Security Discussion ❌ Cancel Reply