Vulnerabilities > CVE-2019-1690 - Unspecified vulnerability in Cisco Application Policy Infrastructure Controller

CVSS 3.3 - LOW

Attack vector

ADJACENT_NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

low complexity

cisco

NVD

Published: 2019-03-11

Updated: 2020-10-16

Summary

A vulnerability in the management interface of Cisco Application Policy Infrastructure Controller (APIC) software could allow an unauthenticated, adjacent attacker to gain unauthorized access on an affected device. The vulnerability is due to a lack of proper access control mechanisms for IPv6 link-local connectivity imposed on the management interface of an affected device. An attacker on the same physical network could exploit this vulnerability by attempting to connect to the IPv6 link-local address on the affected device. A successful exploit could allow the attacker to bypass default access control restrictions on an affected device. Cisco Application Policy Infrastructure Controller (APIC) devices running versions prior to 4.2(0.21c) are affected.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Application Policy Infrastructure Controller - Cisco Application Policy Infrastructure Controller 1.0\(1E\) Cisco Application Policy Infrastructure Controller 1.0\(1H\) Cisco Application Policy Infrastructure Controller 1.0\(1K\) Cisco Application Policy Infrastructure Controller 1.0\(1N\) Cisco Application Policy Infrastructure Controller 1.0\(2J\) Cisco Application Policy Infrastructure Controller 1.0\(2M\) Cisco Application Policy Infrastructure Controller 1.0\(3F\) Cisco Application Policy Infrastructure Controller 1.0\(3I\) Cisco Application Policy Infrastructure Controller 1.0\(3K\) Cisco Application Policy Infrastructure Controller 1.0\(3N\) Cisco Application Policy Infrastructure Controller 1.0\(3O\) Cisco Application Policy Infrastructure Controller 1.0\(4H\) Cisco Application Policy Infrastructure Controller 1.0\(4O\) Cisco Application Policy Infrastructure Controller 1.0\(4Q\) Cisco Application Policy Infrastructure Controller 1.1\(0.920A\) Cisco Application Policy Infrastructure Controller 1.1\(0C\) Cisco Application Policy Infrastructure Controller 1.1\(1J\) Cisco Application Policy Infrastructure Controller 1.1\(1O\) Cisco Application Policy Infrastructure Controller 1.1\(1R\) Cisco Application Policy Infrastructure Controller 1.1\(1S\) Cisco Application Policy Infrastructure Controller 1.1\(2H\) Cisco Application Policy Infrastructure Controller 1.1\(2I\) Cisco Application Policy Infrastructure Controller 1.1\(3F\) Cisco Application Policy Infrastructure Controller 1.1\(4E\) Cisco Application Policy Infrastructure Controller 1.1\(4F\) Cisco Application Policy Infrastructure Controller 1.1\(4G\) Cisco Application Policy Infrastructure Controller 1.1\(4I\) Cisco Application Policy Infrastructure Controller 1.1\(4L\) Cisco Application Policy Infrastructure Controller 1.1\(4M\) Cisco Application Policy Infrastructure Controller 1.2\(1M\) Cisco Application Policy Infrastructure Controller 1.2\(2I\) Cisco Application Policy Infrastructure Controller 1.2\(2J\) Cisco Application Policy Infrastructure Controller 1.2\(3H\) Cisco Application Policy Infrastructure Controller 1.2\(3M\) Cisco Application Policy Infrastructure Controller 1.3\(1I\) Cisco Application Policy Infrastructure Controller 1.3\(1J\) Cisco Application Policy Infrastructure Controller 1.3\(2H\) Cisco Application Policy Infrastructure Controller 1.3\(2I\) Cisco Application Policy Infrastructure Controller 1.3\(2J\) Cisco Application Policy Infrastructure Controller 1.3\(2K\) Cisco Application Policy Infrastructure Controller 2.0\(1N\) Cisco Application Policy Infrastructure Controller 2.0\(1O\) Cisco Application Policy Infrastructure Controller 2.0\(1P\) Cisco Application Policy Infrastructure Controller 2.0\(1Q\) Cisco Application Policy Infrastructure Controller 2.0\(1R\) Cisco Application Policy Infrastructure Controller 2.0\(2F\) Cisco Application Policy Infrastructure Controller 2.0\(2G\) Cisco Application Policy Infrastructure Controller 2.0\(2H\) Cisco Application Policy Infrastructure Controller 2.0\(2L\) Cisco Application Policy Infrastructure Controller 2.0\(2N\) Cisco Application Policy Infrastructure Controller 2.0\(2O\) Cisco Application Policy Infrastructure Controller 2.1\(1I\) Cisco Application Policy Infrastructure Controller 2.1\(2E\) Cisco Application Policy Infrastructure Controller 2.1\(2G\) Cisco Application Policy Infrastructure Controller 2.1\(2K\) Cisco Application Policy Infrastructure Controller 2.1\(3G\) Cisco Application Policy Infrastructure Controller 2.1\(3H\) Cisco Application Policy Infrastructure Controller 2.1\(3J\) Cisco Application Policy Infrastructure Controller 2.1\(4A\) Cisco Application Policy Infrastructure Controller 2.2\(1O\) Cisco Application Policy Infrastructure Controller 2.2\(2E\) Cisco Application Policy Infrastructure Controller 2.2\(2F\) Cisco Application Policy Infrastructure Controller 2.2\(2J\) Cisco Application Policy Infrastructure Controller 2.2\(2K\) Cisco Application Policy Infrastructure Controller 2.2\(2Q\) Cisco Application Policy Infrastructure Controller 2.2\(3J\) Cisco Application Policy Infrastructure Controller 2.2\(3P\) Cisco Application Policy Infrastructure Controller 2.2\(3R\) Cisco Application Policy Infrastructure Controller 2.2\(3S\) Cisco Application Policy Infrastructure Controller 2.2\(3T\) Cisco Application Policy Infrastructure Controller 2.2\(4F\) Cisco Application Policy Infrastructure Controller 2.2\(4P\) Cisco Application Policy Infrastructure Controller 2.2\(4Q\) Cisco Application Policy Infrastructure Controller 2.2\(4R\) Cisco Application Policy Infrastructure Controller 2.3\(1F\) Cisco Application Policy Infrastructure Controller 2.3\(1I\) Cisco Application Policy Infrastructure Controller 2.3\(1L\) Cisco Application Policy Infrastructure Controller 2.3\(1O\) Cisco Application Policy Infrastructure Controller 2.3\(1P\) Cisco Application Policy Infrastructure Controller 3.0\(1K\) Cisco Application Policy Infrastructure Controller 3.0\(2H\) Cisco Application Policy Infrastructure Controller 3.0\(2K\) Cisco Application Policy Infrastructure Controller 3.0\(2N\) Cisco Application Policy Infrastructure Controller 3.1\(1I\) Cisco Application Policy Infrastructure Controller 3.1\(2M\) Cisco Application Policy Infrastructure Controller 3.1\(2O\) Cisco Application Policy Infrastructure Controller 3.1\(2P\) Cisco Application Policy Infrastructure Controller 3.1\(2Q\) Cisco Application Policy Infrastructure Controller 3.1\(2S\) Cisco Application Policy Infrastructure Controller 3.1\(2T\) Cisco Application Policy Infrastructure Controller 3.1\(2U\) Cisco Application Policy Infrastructure Controller 3.1\(2V\) Cisco Application Policy Infrastructure Controller 3.2\(1L\) Cisco Application Policy Infrastructure Controller 3.2\(1M\) Cisco Application Policy Infrastructure Controller 3.2\(2L\) Cisco Application Policy Infrastructure Controller 3.2\(2O\) Cisco Application Policy Infrastructure Controller 3.2\(3I\) Cisco Application Policy Infrastructure Controller 3.2\(3N\) Cisco Application Policy Infrastructure Controller 3.2\(3O\) Cisco Application Policy Infrastructure Controller 3.2\(3R\) Cisco Application Policy Infrastructure Controller 3.2\(3S\) Cisco Application Policy Infrastructure Controller 3.2\(4D\) Cisco Application Policy Infrastructure Controller 3.2\(4E\) Cisco Application Policy Infrastructure Controller 3.2\(5D\) Cisco Application Policy Infrastructure Controller 3.2\(5E\) Cisco Application Policy Infrastructure Controller 3.2\(5F\) Cisco Application Policy Infrastructure Controller 3.2\(6I\) Cisco Application Policy Infrastructure Controller 3.2\(7F\) Cisco Application Policy Infrastructure Controller 3.2\(7K\) Cisco Application Policy Infrastructure Controller 3.2\(9B\) Cisco Application Policy Infrastructure Controller 4.0\(1H\) Cisco Application Policy Infrastructure Controller 4.0\(2C\) Cisco Application Policy Infrastructure Controller 4.0\(3D\) Cisco Application Policy Infrastructure Controller 4.1\(0.88A\) Cisco Application Policy Infrastructure Controller 4.1\(0.90A\) Cisco Application Policy Infrastructure Controller 4.1\(1\) Cisco Application Policy Infrastructure Controller 4.1\(1I\) Cisco Application Policy Infrastructure Controller 4.1\(1J\) Cisco Application Policy Infrastructure Controller 4.1\(1K\) Cisco Application Policy Infrastructure Controller 4.1\(1L\) Cisco Application Policy Infrastructure Controller 4.1\(2G\) Cisco Application Policy Infrastructure Controller 4.1\(2M\) Cisco Application Policy Infrastructure Controller 4.1\(2O\) Cisco Application Policy Infrastructure Controller 4.1\(2S\) Cisco Application Policy Infrastructure Controller 4.1\(2U\) Cisco Application Policy Infrastructure Controller 4.1\(2W\) Cisco Application Policy Infrastructure Controller 4.1\(2X\)	128
Hardware	Cisco Cisco Firepower 2110 - Cisco Firepower 2120 - Cisco Firepower 2130 - Cisco Firepower 2140 - Cisco Firepower 4110 - Cisco Firepower 4112 - Cisco Firepower 4115 - Cisco Firepower 4120 - Cisco Firepower 4125 - Cisco Firepower 4140 - Cisco Firepower 4145 - Cisco Firepower 4150 - Cisco Firepower 9300 - Cisco MDS 9100 - Cisco MDS 9134 - Cisco MDS 9509 - Cisco MDS 9710 - Cisco Nexus 3016 - Cisco Nexus 3048 - Cisco Nexus 3064 - Cisco Nexus 3064 T - Cisco Nexus 31108Pc V - Cisco Nexus 31108Tc V - Cisco Nexus 31128Pq - Cisco Nexus 3132C Z - Cisco Nexus 3132Q - Cisco Nexus 3132Q V - Cisco Nexus 3132Q XL - Cisco Nexus 3164Q - Cisco Nexus 3172 - Cisco Nexus 3172Pq XL - Cisco Nexus 3172Tq - Cisco Nexus 3172Tq 32T - Cisco Nexus 3172Tq XL - Cisco Nexus 3232C - Cisco Nexus 3264C E - Cisco Nexus 3264Q - Cisco Nexus 3408 S - Cisco Nexus 34180Yc - Cisco Nexus 3432D S - Cisco Nexus 3464C - Cisco Nexus 3524 - Cisco Nexus 3524 X - Cisco Nexus 3524 XL - Cisco Nexus 3548 - Cisco Nexus 3548 X - Cisco Nexus 3548 XL - Cisco Nexus 36180Yc R - Cisco Nexus 3636C R - Cisco Nexus 5010 - Cisco Nexus 5020 - Cisco Nexus 5548P - Cisco Nexus 5548Up - Cisco Nexus 5596T - Cisco Nexus 5596Up - Cisco Nexus 56128P - Cisco Nexus 5624Q - Cisco Nexus 5648Q - Cisco Nexus 5672Up - Cisco Nexus 5696Q - Cisco Nexus 7000 - Cisco Nexus 7700 - Cisco Nexus 9000V - Cisco Nexus 92160Yc X - Cisco Nexus 92300Yc - Cisco Nexus 92304Qc - Cisco Nexus 92348Gc X - Cisco Nexus 9236C - Cisco Nexus 9272Q - Cisco Nexus 93108Tc EX - Cisco Nexus 93108Tc FX - Cisco Nexus 93120Tx - Cisco Nexus 93128Tx - Cisco Nexus 93180Lc EX - Cisco Nexus 93180Yc EX - Cisco Nexus 93180Yc FX - Cisco Nexus 93216Tc FX2 - Cisco Nexus 93240Yc FX2 - Cisco Nexus 9332C - Cisco Nexus 9332Pq - Cisco Nexus 93360Yc FX2 - Cisco Nexus 9336C FX2 - Cisco Nexus 9336Pq ACI Spine - Cisco Nexus 9348Gc FXP - Cisco Nexus 9364C - Cisco Nexus 9372Px - Cisco Nexus 9372Px E - Cisco Nexus 9372Tx - Cisco Nexus 9372Tx E - Cisco Nexus 9396Px - Cisco Nexus 9396Tx - Cisco Nexus 9504 - Cisco Nexus 9508 - Cisco Nexus 9516 - Cisco UCS 6248Up - Cisco UCS 6296Up - Cisco UCS 6324 - Cisco UCS 6332 - Cisco UCS 6400 -	99

Summary

Vulnerable Configurations

References