CVE-2025-20290
BaseFortify
Publication date: 2025-08-27
Last updated on: 2025-08-29
Assigner: Cisco Systems, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| cisco | ucs_6400_series_fabric_interconnects | * |
| cisco | ucs_6500_series_fabric_interconnects | * |
| cisco | ucs_x-series_direct_fabric_interconnect_9108_100g | * |
| cisco | nexus_3000_series_switches | * |
| cisco | nexus_9000_series_switches | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-200 | The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the logging feature of Cisco NX-OS Software on certain Cisco Nexus switches and UCS Fabric Interconnects. It is caused by improper logging of sensitive information, which allows an authenticated local attacker with access to the device's file system to retrieve sensitive data such as stored credentials from log files. [1]
How can this vulnerability impact me? :
If exploited, this vulnerability could allow an authenticated local attacker to access sensitive information like stored credentials from log files. This could lead to unauthorized access or further compromise of the affected network devices. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection involves verifying if your devices are running affected software versions and checking for local authenticated access to the file system or the ability to generate and download tech support files containing system logs. Since the sensitive information is logged improperly and stored in log files accessible only via the underlying OS file system or tech support files, direct CLI or UCS Manager UI commands to detect the vulnerability are not available. Cisco recommends using the Cisco Software Checker tool to identify affected software versions. There are no specific commands provided to detect exploitation or presence of the vulnerability on the system. [1]
What immediate steps should I take to mitigate this vulnerability?
The immediate mitigation step is to upgrade affected devices to the fixed software versions released by Cisco. There are no workarounds available for this vulnerability. Customers should consult Cisco Security Advisories and use the Cisco Software Checker tool to identify the appropriate fixed releases for their devices and apply those updates promptly to prevent exploitation. [1]