CVE-2020-3386

CVE-2020-3386 describes a critical authorization bypass vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM). An authenticated, low-privileged remote attacker can exploit insufficient authorization to execute arbitrary actions with administrative privileges. This vulnerability carries a high CVSS score of 8.8, indicating a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered some community discussion and media coverage, suggesting awareness within the security community.