CVE-2021-1266CWE-400

Cisco Managed Services Accelerator Denial of Service Vulnerability

Medium · published February 4, 2021

CVSS v3.1
4.3
EPSS
1%
Percentile
66.3
In the wild
Unconfirmed
What it is

A vulnerability in the REST API of Cisco Managed Services Accelerator (MSX) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the way that the affected software logs certain API requests. An attacker could exploit this vulnerability by sending a flood of crafted API requests to an affected device. A successful exploit could allow the attacker to cause a DoS condition on the affected device.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01140 · 66.3th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2021-02-04T16:35Z
EPSS history
Timeline
  • 04 FEB 16:35Z
    Cisco Managed Services Accelerator Denial of Service Vulnerability
    cvelistv5