CVE-2021-1354: Cisco Unified Computing System Central Software Improper Certificate Validation Vulnerability
A vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager (UCSM). This vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to the registration API. A successful exploit could allow the attacker to register a rogue Cisco UCSM and gain access to Cisco UCS Central Software data and Cisco UCSM inventory data.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-1354?
CVE-2021-1354 is a vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software.
How does CVE-2021-1354 affect Cisco Unified Computing System (UCS) Central Software?
CVE-2021-1354 could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager (UCSM) due to improper certificate validation.
What is the severity of CVE-2021-1354?
CVE-2021-1354 has a severity rating of medium with a score of 3.5.
How can the vulnerability CVE-2021-1354 be fixed?
To fix CVE-2021-1354, Cisco recommends updating to the fixed software version specified in the Cisco Security Advisory.
Where can I find more information about CVE-2021-1354?
More information about CVE-2021-1354 can be found in the Cisco Security Advisory at the provided reference link.