CISCO-CVE-2025-20290

MEDIUM5.5

Cisco NXOS Software Sensitive Log Information Disclosure Vulnerability

Published Aug 27, 2025

Modified 6 months ago

Affected Packages

Cisco NX-OS

CiscoNXOS Nexus3000

Affected versions:

10.1(1)10.1(2)10.1(2t)10.2(1)10.2(2)10.2(3)10.2(3t)10.2(3v)10.2(4)10.2(5)+83 more

Cisco NX-OS

CiscoNXOS Nexus9000

Affected versions:

10.1(1)10.1(2)10.2(1)10.2(1q)10.2(2)10.2(2a)10.2(3)10.2(4)10.2(5)10.2(6)+97 more

CVSS Analysis

CVSS v3.1

5.5

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

NoneI:N

Availability

NoneA:N

5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Upstream

Ecosystems

Timeline

PublishedAug 27, 2025

ModifiedAug 27, 2025