CVE-2021-1601CWE-284

Cisco Intersight Virtual Appliance IPv4 and IPv6 Forwarding Vulnerabilities

High · published July 22, 2021

CVSS v3.1
8.3
EPSS
0%
Percentile
33.3
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent attacker to access sensitive internal services from an external interface. These vulnerabilities are due to insufficient restrictions for IPv4 or IPv6 packets that are received on the external management interface. An attacker could exploit these vulnerabilities by sending specific traffic to this interface on an affected device. A successful exploit could allow the attacker to access sensitive internal services and make configuration changes on the affected device.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00402 · 33.3th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-07-22T15:20Z
EPSS history
Timeline
  • 22 JUL 15:20Z
    Cisco Intersight Virtual Appliance IPv4 and IPv6 Forwarding Vulnerabilities
    cvelistv5