CVE-2021-1581 MEDIUM

CVE-2021-1581: Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities

Vendor Cisco
Product Cisco Application Policy Infrastructure Controller (APIC)
Weakness CWE-284
Published August 25, 2021
Last update November 7, 2024
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

What the vulnerability does

01Description

Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform a command injection or file upload attack on an affected system. For more information about these vulnerabilities, see the Details section of this advisory.

Key dates

02Disclosure timeline

August 25, 2021 CVE published
November 7, 2024 Record updated