Cisco Digital Network Architecture Center Stored Cross-Site Scripting Vulnerability

Vulnerability

The vulnerability is a stored cross-site scripting (XSS) issue in the web-based management interface of Cisco DNA Center Software. It exists due to insufficient validation of user-supplied input [1]. Affected versions are those earlier than 1.3.0.6 and 1.3.1.4 [1]. The attack requires administrator credentials to access the management interface [1].

Exploitation

An authenticated attacker with administrator privileges can exploit this vulnerability by crafting a malicious link and persuading a user (e.g., another administrator) to click it [1]. The attacker does not need network-level access beyond normal management connectivity. The stored XSS payload is delivered via the crafted link and executed when the target user interacts with the affected interface [1].

Impact

Successful exploitation allows the attacker to execute arbitrary script code in the security context of the victim's browser session on the management interface [1]. This can lead to access to sensitive, browser-based information, such as session tokens or displayed data, and could potentially be used to perform administrative actions on behalf of the victim [1]. The attacker gains no additional system-level privileges but compromises the confidentiality and integrity of the management interface session [1].

Mitigation

Cisco has released fixed versions: 1.3.0.6 and 1.3.1.4 and later [1]. Users should upgrade to these versions using the System Updates feature [1]. There is no workaround described in the advisory; upgrading is the recommended action [1].