Executive Risk Summary
"A vulnerability in the management API of Cisco Catalyst Center could allow an unauthenticated, remote attacker to read and modify the outgoing proxy configuration settings, potentially disrupting internet traffic or intercepting outbound internet traffic. This vulnerability is due to the lack of authentication in an API endpoint, which can be exploited by sending a request to the affected API of a Catalyst Center device."
Operational Audit Arsenal
Target Type API Endpoint
Target Asset Management API
Standard Path Management Plane
Manual Verification Required
This is a non-Windows asset (Cisco). Use the target asset details and official path provided above to verify your current version against the official vendor advisories listed below.
Patch Impact Forecast
Reboot Required Likely
Potential disruption of internet traffic
Internal Work Notes
CVE-2025-20210: Unauthenticated API vulnerability in Cisco Catalyst Center allowing modification of outgoing proxy configuration, potentially disrupting internet traffic or allowing interception of outbound traffic.
Technical Intelligence & Operational Utilities • Delivered Weekly
Intelligence Sources
Related Cisco Threats
Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.