Vulnerabilities > CVE-2021-1577 - Unspecified vulnerability in Cisco Application Policy Infrastructure Controller

CVSS 9.1 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

cisco

critical

NVD

Published: 2021-08-25

Updated: 2023-11-07

Summary

A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an unauthenticated, remote attacker to read or write arbitrary files on an affected system. This vulnerability is due to improper access control. An attacker could exploit this vulnerability by using a specific API endpoint to upload a file to an affected device. A successful exploit could allow the attacker to read or write arbitrary files on an affected device.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Application Policy Infrastructure Controller - Cisco Application Policy Infrastructure Controller 1.0\(1E\) Cisco Application Policy Infrastructure Controller 1.0\(1H\) Cisco Application Policy Infrastructure Controller 1.0\(1K\) Cisco Application Policy Infrastructure Controller 1.0\(1N\) Cisco Application Policy Infrastructure Controller 1.0\(2J\) Cisco Application Policy Infrastructure Controller 1.0\(2M\) Cisco Application Policy Infrastructure Controller 1.0\(3F\) Cisco Application Policy Infrastructure Controller 1.0\(3I\) Cisco Application Policy Infrastructure Controller 1.0\(3K\) Cisco Application Policy Infrastructure Controller 1.0\(3N\) Cisco Application Policy Infrastructure Controller 1.0\(3O\) Cisco Application Policy Infrastructure Controller 1.0\(4H\) Cisco Application Policy Infrastructure Controller 1.0\(4O\) Cisco Application Policy Infrastructure Controller 1.0\(4Q\) Cisco Application Policy Infrastructure Controller 1.1\(0.920A\) Cisco Application Policy Infrastructure Controller 1.1\(0C\) Cisco Application Policy Infrastructure Controller 1.1\(1J\) Cisco Application Policy Infrastructure Controller 1.1\(1O\) Cisco Application Policy Infrastructure Controller 1.1\(1R\) Cisco Application Policy Infrastructure Controller 1.1\(1S\) Cisco Application Policy Infrastructure Controller 1.1\(2H\) Cisco Application Policy Infrastructure Controller 1.1\(2I\) Cisco Application Policy Infrastructure Controller 1.1\(3F\) Cisco Application Policy Infrastructure Controller 1.1\(4E\) Cisco Application Policy Infrastructure Controller 1.1\(4F\) Cisco Application Policy Infrastructure Controller 1.1\(4G\) Cisco Application Policy Infrastructure Controller 1.1\(4I\) Cisco Application Policy Infrastructure Controller 1.1\(4L\) Cisco Application Policy Infrastructure Controller 1.1\(4M\) Cisco Application Policy Infrastructure Controller 1.1.3 Cisco Application Policy Infrastructure Controller 1.2\(1M\) Cisco Application Policy Infrastructure Controller 1.2\(2\) Cisco Application Policy Infrastructure Controller 1.2\(2I\) Cisco Application Policy Infrastructure Controller 1.2\(2J\) Cisco Application Policy Infrastructure Controller 1.2\(3\) Cisco Application Policy Infrastructure Controller 1.2\(3H\) Cisco Application Policy Infrastructure Controller 1.2\(3M\) Cisco Application Policy Infrastructure Controller 1.2.2 Cisco Application Policy Infrastructure Controller 1.2_Base Cisco Application Policy Infrastructure Controller 1.3\(1\) Cisco Application Policy Infrastructure Controller 1.3\(1I\) Cisco Application Policy Infrastructure Controller 1.3\(1J\) Cisco Application Policy Infrastructure Controller 1.3\(2\) Cisco Application Policy Infrastructure Controller 1.3\(2F\) Cisco Application Policy Infrastructure Controller 1.3\(2H\) Cisco Application Policy Infrastructure Controller 1.3\(2I\) Cisco Application Policy Infrastructure Controller 1.3\(2J\) Cisco Application Policy Infrastructure Controller 1.3\(2K\) Cisco Application Policy Infrastructure Controller 2.0\(1\) Cisco Application Policy Infrastructure Controller 2.0\(1N\) Cisco Application Policy Infrastructure Controller 2.0\(1O\) Cisco Application Policy Infrastructure Controller 2.0\(1P\) Cisco Application Policy Infrastructure Controller 2.0\(1Q\) Cisco Application Policy Infrastructure Controller 2.0\(1R\) Cisco Application Policy Infrastructure Controller 2.0\(2F\) Cisco Application Policy Infrastructure Controller 2.0\(2G\) Cisco Application Policy Infrastructure Controller 2.0\(2H\) Cisco Application Policy Infrastructure Controller 2.0\(2L\) Cisco Application Policy Infrastructure Controller 2.0\(2N\) Cisco Application Policy Infrastructure Controller 2.0\(2O\) Cisco Application Policy Infrastructure Controller 2.0_Base Cisco Application Policy Infrastructure Controller 2.1\(1I\) Cisco Application Policy Infrastructure Controller 2.1\(2E\) Cisco Application Policy Infrastructure Controller 2.1\(2G\) Cisco Application Policy Infrastructure Controller 2.1\(2K\) Cisco Application Policy Infrastructure Controller 2.1\(3G\) Cisco Application Policy Infrastructure Controller 2.1\(3H\) Cisco Application Policy Infrastructure Controller 2.1\(3J\) Cisco Application Policy Infrastructure Controller 2.1\(4A\) Cisco Application Policy Infrastructure Controller 2.2\(1O\) Cisco Application Policy Infrastructure Controller 2.2\(2E\) Cisco Application Policy Infrastructure Controller 2.2\(2F\) Cisco Application Policy Infrastructure Controller 2.2\(2J\) Cisco Application Policy Infrastructure Controller 2.2\(2K\) Cisco Application Policy Infrastructure Controller 2.2\(2Q\) Cisco Application Policy Infrastructure Controller 2.2\(3J\) Cisco Application Policy Infrastructure Controller 2.2\(3P\) Cisco Application Policy Infrastructure Controller 2.2\(3R\) Cisco Application Policy Infrastructure Controller 2.2\(3S\) Cisco Application Policy Infrastructure Controller 2.2\(3T\) Cisco Application Policy Infrastructure Controller 2.2\(4F\) Cisco Application Policy Infrastructure Controller 2.2\(4P\) Cisco Application Policy Infrastructure Controller 2.2\(4Q\) Cisco Application Policy Infrastructure Controller 2.2\(4R\) Cisco Application Policy Infrastructure Controller 2.3\(1F\) Cisco Application Policy Infrastructure Controller 2.3\(1I\) Cisco Application Policy Infrastructure Controller 2.3\(1L\) Cisco Application Policy Infrastructure Controller 2.3\(1O\) Cisco Application Policy Infrastructure Controller 2.3\(1P\) Cisco Application Policy Infrastructure Controller 3.0\(1K\) Cisco Application Policy Infrastructure Controller 3.0\(2H\) Cisco Application Policy Infrastructure Controller 3.0\(2K\) Cisco Application Policy Infrastructure Controller 3.0\(2N\) Cisco Application Policy Infrastructure Controller 3.0\(3I\) Cisco Application Policy Infrastructure Controller 3.1\(1I\) Cisco Application Policy Infrastructure Controller 3.1\(2M\) Cisco Application Policy Infrastructure Controller 3.1\(2O\) Cisco Application Policy Infrastructure Controller 3.1\(2P\) Cisco Application Policy Infrastructure Controller 3.1\(2Q\) Cisco Application Policy Infrastructure Controller 3.1\(2S\) Cisco Application Policy Infrastructure Controller 3.1\(2T\) Cisco Application Policy Infrastructure Controller 3.1\(2U\) Cisco Application Policy Infrastructure Controller 3.1\(2V\) Cisco Application Policy Infrastructure Controller 3.2\(1L\) Cisco Application Policy Infrastructure Controller 3.2\(1M\) Cisco Application Policy Infrastructure Controller 3.2\(2L\) Cisco Application Policy Infrastructure Controller 3.2\(2O\) Cisco Application Policy Infrastructure Controller 3.2\(3I\) Cisco Application Policy Infrastructure Controller 3.2\(3N\) Cisco Application Policy Infrastructure Controller 3.2\(3O\) Cisco Application Policy Infrastructure Controller 3.2\(3R\) Cisco Application Policy Infrastructure Controller 3.2\(3S\) Cisco Application Policy Infrastructure Controller 3.2\(4D\) Cisco Application Policy Infrastructure Controller 3.2\(4E\) Cisco Application Policy Infrastructure Controller 3.2\(5D\) Cisco Application Policy Infrastructure Controller 3.2\(5E\) Cisco Application Policy Infrastructure Controller 3.2\(5F\) Cisco Application Policy Infrastructure Controller 3.2\(6I\) Cisco Application Policy Infrastructure Controller 3.2\(7F\) Cisco Application Policy Infrastructure Controller 3.2\(7K\) Cisco Application Policy Infrastructure Controller 3.2\(9B\) Cisco Application Policy Infrastructure Controller 4.0\(1H\) Cisco Application Policy Infrastructure Controller 4.0\(2C\) Cisco Application Policy Infrastructure Controller 4.0\(3D\) Cisco Application Policy Infrastructure Controller 4.1\(0.90A\) Cisco Application Policy Infrastructure Controller 4.1\(1I\) Cisco Application Policy Infrastructure Controller 4.1\(1J\) Cisco Application Policy Infrastructure Controller 4.1\(1K\) Cisco Application Policy Infrastructure Controller 4.1\(1L\) Cisco Application Policy Infrastructure Controller 4.1\(2G\) Cisco Application Policy Infrastructure Controller 4.1\(2M\) Cisco Application Policy Infrastructure Controller 4.1\(2O\) Cisco Application Policy Infrastructure Controller 4.1\(2S\) Cisco Application Policy Infrastructure Controller 4.1\(2U\) Cisco Application Policy Infrastructure Controller 4.1\(2W\) Cisco Application Policy Infrastructure Controller 4.1\(2X\) Cisco Application Policy Infrastructure Controller 4.2\(0.21C\) Cisco Application Policy Infrastructure Controller 4.2\(1I\) Cisco Application Policy Infrastructure Controller 4.2\(1J\) Cisco Application Policy Infrastructure Controller 4.2\(1L\) Cisco Application Policy Infrastructure Controller 4.2\(2E\) Cisco Application Policy Infrastructure Controller 4.2\(2F\) Cisco Application Policy Infrastructure Controller 4.2\(2G\) Cisco Application Policy Infrastructure Controller 4.2\(2L\) Cisco Application Policy Infrastructure Controller 4.2\(3J\) Cisco Application Policy Infrastructure Controller 5.0\(2H\) Cisco Cloud Application Policy Infrastructure Controller * Cisco Cloud Application Policy Infrastructure Controller 5.0\(2H\)	150

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capic-frw-Nt3RYxR2