Cisco DNA Center Authentication Bypass Vulnerability

Vulnerability

A vulnerability in Cisco Digital Network Architecture (DNA) Center allows an unauthenticated, adjacent attacker to bypass authentication and access critical internal services. The issue stems from insufficient access restriction to ports necessary for system operation. Affected versions include Cisco DNA Center prior to the fixed releases provided in the advisory [1].

Exploitation

An attacker can exploit this vulnerability by connecting an unauthorized network device to the subnet designated for cluster services. The attacker must be adjacent to the targeted network and does not require authentication or user interaction. Once connected, the attacker can reach internal services that are not hardened for external access [1].

Impact

Successful exploitation allows the attacker to access critical internal services, potentially leading to information disclosure or further compromise of the Cisco DNA Center infrastructure. The attacker gains unauthorized access to services that should be protected by authentication [1].

Mitigation

Cisco has released free software updates that address this vulnerability. Customers should upgrade to the fixed versions as specified in the Cisco Security Advisory [1]. No workarounds are available. Customers without service contracts should contact the Cisco TAC for assistance [1].