CVE-2021-1578CWE-636

Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability

High · published August 25, 2021

CVSS v3.1
8.8
EPSS
2%
Percentile
80.3
In the wild
Unconfirmed
What it is

A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an authenticated, remote attacker to elevate privileges to Administrator on an affected device. This vulnerability is due to an improper policy default setting. An attacker could exploit this vulnerability by using a non-privileged credential for Cisco ACI Multi-Site Orchestrator (MSO) to send a specific API request to a managed Cisco APIC or Cloud APIC device. A successful exploit could allow the attacker to obtain Administrator credentials on the affected device.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01971 · 80.3th percentile
Weakness
CWE-636 · Not Failing Securely ('Failing Open')
Published
2021-08-25T19:10Z
EPSS history
Timeline
  • 25 AUG 19:10Z
    Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability
    cvelistv5