Vulnerabilities > CVE-2021-1354 - Unspecified vulnerability in Cisco Unified Computing System Central Software

CVSS 3.5 - LOW

Attack vector

ADJACENT_NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

low complexity

cisco

NVD

Published: 2021-02-04

Updated: 2024-11-21

Summary

A vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager (UCSM). This vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to the registration API. A successful exploit could allow the attacker to register a rogue Cisco UCSM and gain access to Cisco UCS Central Software data and Cisco UCSM inventory data.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Unified Computing System Central Software 1.0 Cisco Unified Computing System Central Software 1.0\(1A\) Cisco Unified Computing System Central Software 1.0_Base Cisco Unified Computing System Central Software 1.1 Cisco Unified Computing System Central Software 1.1\(1A\) Cisco Unified Computing System Central Software 1.1\(1B\) Cisco Unified Computing System Central Software 1.1_Base Cisco Unified Computing System Central Software 1.2\(1A\) Cisco Unified Computing System Central Software 1.2\(1D\) Cisco Unified Computing System Central Software 1.2\(1E\) Cisco Unified Computing System Central Software 1.2\(1F\) Cisco Unified Computing System Central Software 1.3\(0.1\) Cisco Unified Computing System Central Software 1.3\(0.99\) Cisco Unified Computing System Central Software 1.4\(1A\) Cisco Unified Computing System Central Software 1.5\(1C\)	15

Summary

Vulnerable Configurations

References