Cisco DNA Center Privilege Escalation Vulnerability

Vulnerability

A privilege escalation vulnerability exists in the user management roles of Cisco DNA Center. Due to improper enforcement of actions for assigned user roles, an authenticated attacker with the Observer role can execute commands to view diagnostic information. Versions prior to 2.1.1.0, 2.1.2.0, 2.1.2.3, and 2.1.2.4 are affected [1].

Exploitation

An attacker must authenticate to the Cisco DNA Center with a user account that has been assigned the Observer role. Once authenticated, the attacker can execute commands that normally require higher privileges, allowing them to view diagnostic information of managed devices [1].

Impact

Successful exploitation allows an attacker with Observer role to access diagnostic information that should be restricted. This results in unauthorized disclosure of sensitive information about the managed network devices, violating confidentiality [1].

Mitigation

Cisco has addressed this vulnerability in software releases 2.1.1.0, 2.1.2.0, 2.1.2.3, and 2.1.2.4 and later. Users should upgrade to one of these fixed versions [1]. No workarounds are available.