imPC@ndo IT

Tracker / CVE-2021-1580

CVE-2021-1580

Medium 6.5

Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform a command injection or file upload attack on an affected system. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products and versions

cisco application_policy_infrastructure_controller · … → 3.2\(10e\)
cisco application_policy_infrastructure_controller · 4.0 → 4.2\(6h\)
cisco application_policy_infrastructure_controller · 5.0 → 5.1\(3e\)
cisco cloud_application_policy_infrastructure_controller · … → 3.2\(10e\)
cisco cloud_application_policy_infrastructure_controller · 4.0 → 4.2\(6h\)
cisco cloud_application_policy_infrastructure_controller · 5.0 → 5.1\(3e\)

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References