CVE-2023-20059

CVE-2023-20059 is a medium-severity vulnerability in the Cisco Network Plug-and-Play (PnP) agent of Cisco DNA Center, affecting Cisco Catalyst Center. It allows an authenticated, low-privileged remote attacker to view sensitive information, such as configuration files, in clear text due to improper role-based access control (RBAC). The attack requires valid user credentials and involves querying an internal API. While the CVSS score is 6.5, indicating a moderate risk, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.