CVE-2021-1581: Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities
First published: Wed Aug 25 2021(Updated: )
Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform a command injection or file upload attack on an affected system. For more information about these vulnerabilities, see the Details section of this advisory.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Application Policy Infrastructure Controller | <3.2\(10f\) | |
| Cisco Application Policy Infrastructure Controller | >=4.0<4.2\(7l\) | |
| Cisco Application Policy Infrastructure Controller | >=5.0<5.2\(1g\) | |
| Cisco Cloud Application Policy Infrastructure Controller | <3.2\(10f\) | |
| Cisco Cloud Application Policy Infrastructure Controller | >=4.0<4.2\(7l\) | |
| Cisco Cloud Application Policy Infrastructure Controller | >=5.0<5.2\(1g\) |
Remedy
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capic-mdvul-HBsJBuvW
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-1581?
CVE-2021-1581 refers to multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC.
What is the severity of CVE-2021-1581?
The severity of CVE-2021-1581 is critical, with a severity value of 9.1.
What is affected by CVE-2021-1581?
Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud APIC versions 3.2(10f) up to exclusive, 4.0 to exclusive, 4.2(7l) up to exclusive, 5.0 to exclusive, and 5.2(1g) up to exclusive are affected by CVE-2021-1581.
How can a remote attacker exploit CVE-2021-1581?
A remote attacker can exploit CVE-2021-1581 by performing a command injection or file upload attack on an affected system.
Where can I find more information about CVE-2021-1581?
You can find more information about CVE-2021-1581 at the following link: [Cisco Security Advisory](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capic-mdvul-HBsJBuvW)
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/severity
- agent/references
- agent/author
- agent/title
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/tags
- vendor/cisco
- canonical/cisco application policy infrastructure controller
- version/cisco application policy infrastructure controller/4.0
- version/cisco application policy infrastructure controller/5.0
- canonical/cisco cloud application policy infrastructure controller
- version/cisco cloud application policy infrastructure controller/4.0
- version/cisco cloud application policy infrastructure controller/5.0