CVE-2021-1580CWE-284

Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities

Medium · published August 25, 2021

CVSS v3.1
6.5
EPSS
2%
Percentile
78.1
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform a command injection or file upload attack on an affected system. For more information about these vulnerabilities, see the Details section of this advisory.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01779 · 78.1th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-08-25T19:10Z
EPSS history
Timeline
  • 25 AUG 19:10Z
    Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities
    cvelistv5