CVE-2022-20630— Cisco DNA Center Information Disclosure Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-20630
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco DNA Center Information Disclosure Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the audit log of Cisco DNA Center could allow an authenticated, local attacker to view sensitive information in clear text. This vulnerability is due to the unsecured logging of sensitive information on an affected system. An attacker with administrative privileges could exploit this vulnerability by accessing the audit logs through the CLI. A successful exploit could allow the attacker to retrieve sensitive information that includes user credentials.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
信息暴露
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco DNA Center 日志信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco DNA Center是美国思科（Cisco）公司的一个网络管理和命令中心服务。 Cisco DNA Center存在日志信息泄露漏洞，该漏洞源于软件将敏感信息存储到日志文件中，本地用户可以读取日志文件并访问敏感数据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Digital Network Architecture Center (DNA Center) | n/a | - |
II. Public POCs for CVE-2022-20630
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-20630
请登录查看更多情报信息。
Vendor Advisories for CVE-2022-20630 (1)
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-info-disc-8QEynKEjvendor-advisoryx_refsource_CISCO
Same Patch Batch · Cisco · 2022-02-10 · 18 CVEs total
| CVE-2022-20706 | 10.0 CRITICAL | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2022-20749 | 10.0 CRITICAL | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2022-20712 | 10.0 CRITICAL | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2022-20711 | 10.0 CRITICAL | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2022-20710 | 10.0 CRITICAL | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2022-20709 | 10.0 CRITICAL | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2022-20708 | 10.0 CRITICAL | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2022-20707 | 10.0 CRITICAL | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2022-20705 | 10.0 CRITICAL | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2022-20704 | 10.0 CRITICAL | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2022-20703 | 10.0 CRITICAL | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2022-20702 | 10.0 CRITICAL | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2022-20701 | 10.0 CRITICAL | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2022-20700 | 10.0 CRITICAL | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2022-20699 | 10.0 CRITICAL | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2022-20738 | 5.8 MEDIUM | Cisco Umbrella Secure Web Gateway File Inspection Bypass Vulnerability |
| CVE-2022-20680 | 4.3 MEDIUM | Cisco Prime Service Catalog Information Disclosure Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco Digital Network Architecture Center (DNA Center)
- CVE-2025-20346
Cisco Catalyst Center Privilege Escalation Vulnerability - CVE-2025-20355
Cisco Catalyst Center Software HTTP Open Redirect Vulnerabil - CVE-2025-20353
Cisco Catalyst Center Cross-Site Scripting Vulnerability - CVE-2025-20349
Cisco DNA Center API Command Injection Vulnerability - CVE-2025-20341
Cisco Catalyst Center Privilege Escalation Vulnerability
Same vendor: Cisco
- CVE-2026-20199
Cisco ThousandEyes Virtual Appliance 注入漏洞 - CVE-2026-20171
Cisco Nexus 3000 and 9000 Series Border Gateway Protocol Den - CVE-2026-20206
Cisco ThousandEyes BrowserBot Command Injection Vulnerabilit - CVE-2026-20223
Cisco Secure Workload Unauthorized API Access Vulnerability - CVE-2026-20224
Cisco Catalyst SD-WAN Manager XML External Entity Injection
Same weakness: CWE-200
- CVE-2026-40166
authentik: Non-admin user can retrieve confidential OAuth cl - CVE-2026-3636
Sanitize team member data returned by API - CVE-2026-7636
Slider by Soliloquy <= 2.8.1 - Authenticated (Subscriber+) I - CVE-2026-44409
Information disclosure vulnerability in ZTE MU5250 - CVE-2026-6826
Concrete 9.5.0 and below has file usage disclosure via missi
V. Comments for CVE-2022-20630
No comments yet