# CVE-2025-20163

## Summary

- **CVE ID:** CVE-2025-20163
- **Severity:** HIGH
- **CVSS Score:** 8.7 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N)
- **CWE:** CWE-322
- **Published:** Jun 4, 2025
- **Last Modified:** Mar 12, 2026

## Description

A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to impersonate Cisco NDFC-managed devices.

This vulnerability is due to insufficient SSH host key validation. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on SSH connections to Cisco NDFC-managed devices, which could allow an attacker to intercept this traffic. A successful exploit could allow the attacker to impersonate a managed device and capture user credentials.

## Affected Products

- Cisco — Cisco Data Center Network Manager (11.2(1))
- Cisco — Cisco Data Center Network Manager (7.0(2))
- Cisco — Cisco Data Center Network Manager (10.3(2)IPFM)
- Cisco — Cisco Data Center Network Manager (10.1(1))
- Cisco — Cisco Data Center Network Manager (7.2(3))
- Cisco — Cisco Data Center Network Manager (7.2(2))
- Cisco — Cisco Data Center Network Manager (7.2(1))
- Cisco — Cisco Data Center Network Manager (11.0(1))
- Cisco — Cisco Data Center Network Manager (10.4(1))
- Cisco — Cisco Data Center Network Manager (10.2(1))
- Cisco — Cisco Data Center Network Manager (7.2(2a))
- Cisco — Cisco Data Center Network Manager (10.1(2))
- Cisco — Cisco Data Center Network Manager (7.1(1))
- Cisco — Cisco Data Center Network Manager (12.1(1))
- Cisco — Cisco Data Center Network Manager (11.1(1))
- Cisco — Cisco Data Center Network Manager (10.3(1))
- Cisco — Cisco Data Center Network Manager (10.3(1)R(1))
- Cisco — Cisco Data Center Network Manager (7.0(1))
- Cisco — Cisco Data Center Network Manager (10.0(1))
- Cisco — Cisco Data Center Network Manager (7.1(2))
- Cisco — Cisco Data Center Network Manager (11.4(1))
- Cisco — Cisco Data Center Network Manager (10.4(2))
- Cisco — Cisco Data Center Network Manager (11.3(1))
- Cisco — Cisco Data Center Network Manager (11.5(1))
- Cisco — Cisco Data Center Network Manager (11.5(2))
- Cisco — Cisco Data Center Network Manager (11.5(3))
- Cisco — Cisco Data Center Network Manager (12.0.1a)
- Cisco — Cisco Data Center Network Manager (11.5(3a))
- Cisco — Cisco Data Center Network Manager (12.0.2d)
- Cisco — Cisco Data Center Network Manager (12.0.2f)
- Cisco — Cisco Data Center Network Manager (11.5(4))
- Cisco — Cisco Data Center Network Manager (12.1.1)
- Cisco — Cisco Data Center Network Manager (12.1.1e)
- Cisco — Cisco Data Center Network Manager (12.1.1p)
- Cisco — Cisco Data Center Network Manager (12.1.2e)
- Cisco — Cisco Data Center Network Manager (12.1.2p)
- Cisco — Cisco Data Center Network Manager (12.1.3b)
- Cisco — Cisco Data Center Network Manager (12.2.1)
- Cisco — Cisco Data Center Network Manager (12.2.2)
- Cisco — Cisco Nexus Dashboard (3.1(1k))
- Cisco — Cisco Nexus Dashboard (3.1(1l))
- Cisco — Cisco Nexus Dashboard (3.2(1e))
- Cisco — Cisco Nexus Dashboard (3.2(1i))
- Cisco — Cisco Nexus Dashboard (3.3(1a))
- Cisco — Cisco Nexus Dashboard (3.3(1b))
- Cisco — Cisco Nexus Dashboard (3.3(2b))
- Cisco — Cisco Nexus Dashboard (4.0(1i))
- Cisco — Cisco Nexus Dashboard (3.3(2g))

## References

- [CNA](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndfc-shkv-snQJtjrp)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.43%
- **EPSS Percentile:** 36.0

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-09._