V
Scaner-VS
ENRU
HomeCatalogSourcesCWECAPECATT&CKMitigationsProductsVendorsDocs
←Back to catalog
BDU:2021-06218
BDU
Medium

Уязвимость веб-интерфейса и API средства управления информационной инфраструктурой Cisco Application Policy Infrastructure Controller сущес…

CVSS
6.5
Medium
EPSS
0.00
p0
Published
2021-01-01
Updated
2021-01-01
Description

Уязвимость веб-интерфейса и API средства управления информационной инфраструктурой Cisco Application Policy Infrastructure Controller существует из-за непринятия мер по нейтрализации специальных элементов, используемых в команде операционной системы. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольную команду

Affected products
Cisco systems inc. Application policy infrastructure controllerCisco systems inc. Application policy infrastructure controllerCisco systems inc. Application policy infrastructure controllerCisco systems inc. Application policy infrastructure controller
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Timeline
2021-01-01
Published
2021-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: N
Network (N)
Attack Complexity
AC: L
Low (L)
Privileges Required
PR: H
High (H)
User Interaction
UI: N
None (N)
Scope
S: U
Unchanged (U)
Confidentiality Impact
C: H
High (H)
Integrity Impact
I: H
High (H)
Availability Impact
A: N
None (N)
Exploit indicators
EPSS
0.000 · p0
Known exploited (KEV)
No
Known exploits — Сканер-ВС
No Сканер-ВС checks registered for this vulnerability yet.
Affected products
Cisco
Application Policy Infrastructure Controller
ProductVendorStatus
application policy infrastructure controllercisco systems inc.Tracked
application policy infrastructure controllercisco systems inc.Tracked
application policy infrastructure controllercisco systems inc.Tracked
application policy infrastructure controllercisco systems inc.Tracked
Source databases
BDU
Related vulnerabilities
CVE-2021-1581