CVE-2021-1583CWE-284

Cisco Nexus 9000 Series Fabric Switches ACI Mode Arbitrary File Read Vulnerability

Medium · published August 25, 2021

CVSS v3.1
4.4
EPSS
0%
Percentile
12.0
In the wild
Unconfirmed
What it is

A vulnerability in the fabric infrastructure file system access control of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated, local attacker to read arbitrary files on an affected system. This vulnerability is due to improper access control. An attacker with Administrator privileges could exploit this vulnerability by executing a specific vulnerable command on an affected device. A successful exploit could allow the attacker to read arbitrary files on the file system of the affected device.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.0th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-08-25T19:10Z
EPSS history
Timeline
  • 25 AUG 19:10Z
    Cisco Nexus 9000 Series Fabric Switches ACI Mode Arbitrary File Read Vulnerability
    cvelistv5