CVE-2025-20163

Name of the Vulnerable Software and Affected Versions Cisco Nexus Dashboard Fabric Controller (NDFC) versions prior to 12.2.3

Description A vulnerability exists in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) due to insufficient SSH host key validation. This allows an unauthenticated, remote attacker to perform a machine-in-the-middle (MitM) attack on SSH connections to Cisco NDFC-managed devices. A successful exploit could allow the attacker to intercept traffic and impersonate a managed device, potentially capturing user credentials.

Recommendations Update Cisco Nexus Dashboard Fabric Controller (NDFC) to version 12.2.3 or later.