Логотип exploitDog
bind:CVE-2021-1577
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-1577

Количество 3

Количество 3

nvd логотип

CVE-2021-1577

больше 4 лет назад

A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an unauthenticated, remote attacker to read or write arbitrary files on an affected system. This vulnerability is due to improper access control. An attacker could exploit this vulnerability by using a specific API endpoint to upload a file to an affected device. A successful exploit could allow the attacker to read or write arbitrary files on an affected device.

CVSS3: 9.1
EPSS: Низкий
github логотип

GHSA-c569-4cq6-rvg9

больше 3 лет назад

A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an unauthenticated, remote attacker to read or write arbitrary files on an affected system. This vulnerability is due to improper access control. An attacker could exploit this vulnerability by using a specific API endpoint to upload a file to an affected device. A successful exploit could allow the attacker to read or write arbitrary files on an affected device.

CVSS3: 9.1
EPSS: Низкий
fstec логотип

BDU:2021-05711

больше 4 лет назад

Уязвимость конечной точки API средства управления информационной инфраструктурой Cisco Application Policy Infrastructure Controller, связанная с недостатками контроля доступа, позволяющая нарушителю записывать произвольные файлы

CVSS3: 9.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2021-1577

A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an unauthenticated, remote attacker to read or write arbitrary files on an affected system. This vulnerability is due to improper access control. An attacker could exploit this vulnerability by using a specific API endpoint to upload a file to an affected device. A successful exploit could allow the attacker to read or write arbitrary files on an affected device.

CVSS3: 9.1
1%
Низкий
больше 4 лет назад
github логотип
GHSA-c569-4cq6-rvg9

A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an unauthenticated, remote attacker to read or write arbitrary files on an affected system. This vulnerability is due to improper access control. An attacker could exploit this vulnerability by using a specific API endpoint to upload a file to an affected device. A successful exploit could allow the attacker to read or write arbitrary files on an affected device.

CVSS3: 9.1
1%
Низкий
больше 3 лет назад
fstec логотип
BDU:2021-05711

Уязвимость конечной точки API средства управления информационной инфраструктурой Cisco Application Policy Infrastructure Controller, связанная с недостатками контроля доступа, позволяющая нарушителю записывать произвольные файлы

CVSS3: 9.1
1%
Низкий
больше 4 лет назад

Уязвимостей на страницу