CVE-2021-1248CWE-89

Cisco Data Center Network Manager SQL Injection Vulnerabilities

High · published January 20, 2021

CVSS v3.1
8.8
EPSS
2%
Percentile
79.6
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01908 · 79.6th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2021-01-20T20:10Z
EPSS history
Timeline
  • 20 JAN 20:10Z
    Cisco Data Center Network Manager SQL Injection Vulnerabilities
    cvelistv5