Vulnerabilities > CVE-2021-1581 - Unspecified vulnerability in Cisco products

CVSS 9.1 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

cisco

critical

NVD

Published: 2021-08-25

Updated: 2023-11-07

Summary

Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform a command injection or file upload attack on an affected system. For more information about these vulnerabilities, see the Details section of this advisory.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Application Policy Infrastructure Controller 4.0\(1H\) Cisco Application Policy Infrastructure Controller 4.0\(2C\) Cisco Application Policy Infrastructure Controller 4.0\(3D\) Cisco Application Policy Infrastructure Controller 4.1\(0.88A\) Cisco Application Policy Infrastructure Controller 4.1\(0.90A\) Cisco Application Policy Infrastructure Controller 4.1\(1\) Cisco Application Policy Infrastructure Controller 4.1\(1I\) Cisco Application Policy Infrastructure Controller 4.1\(1J\) Cisco Application Policy Infrastructure Controller 4.1\(1K\) Cisco Application Policy Infrastructure Controller 4.1\(1L\) Cisco Application Policy Infrastructure Controller 4.1\(2G\) Cisco Application Policy Infrastructure Controller 4.1\(2M\) Cisco Application Policy Infrastructure Controller 4.1\(2O\) Cisco Application Policy Infrastructure Controller 4.1\(2S\) Cisco Application Policy Infrastructure Controller 4.1\(2U\) Cisco Application Policy Infrastructure Controller 4.1\(2W\) Cisco Application Policy Infrastructure Controller 4.1\(2X\) Cisco Application Policy Infrastructure Controller 4.2\(0.21C\) Cisco Application Policy Infrastructure Controller 4.2\(1I\) Cisco Application Policy Infrastructure Controller 4.2\(1J\) Cisco Application Policy Infrastructure Controller 4.2\(1L\) Cisco Application Policy Infrastructure Controller 4.2\(2E\) Cisco Application Policy Infrastructure Controller 4.2\(2F\) Cisco Application Policy Infrastructure Controller 4.2\(2G\) Cisco Application Policy Infrastructure Controller 4.2\(2L\) Cisco Application Policy Infrastructure Controller 4.2\(3J\) Cisco Application Policy Infrastructure Controller 4.2\(3N\) Cisco Application Policy Infrastructure Controller 4.2\(6N\) Cisco Application Policy Infrastructure Controller - Cisco Application Policy Infrastructure Controller 1.0\(1E\) Cisco Application Policy Infrastructure Controller 1.0\(1H\) Cisco Application Policy Infrastructure Controller 1.0\(1K\) Cisco Application Policy Infrastructure Controller 1.0\(1N\) Cisco Application Policy Infrastructure Controller 1.0\(2J\) Cisco Application Policy Infrastructure Controller 1.0\(2M\) Cisco Application Policy Infrastructure Controller 1.0\(3F\) Cisco Application Policy Infrastructure Controller 1.0\(3I\) Cisco Application Policy Infrastructure Controller 1.0\(3K\) Cisco Application Policy Infrastructure Controller 1.0\(3N\) Cisco Application Policy Infrastructure Controller 1.0\(3O\) Cisco Application Policy Infrastructure Controller 1.0\(4H\) Cisco Application Policy Infrastructure Controller 1.0\(4O\) Cisco Application Policy Infrastructure Controller 1.0\(4Q\) Cisco Application Policy Infrastructure Controller 1.1\(0.920A\) Cisco Application Policy Infrastructure Controller 1.1\(0C\) Cisco Application Policy Infrastructure Controller 1.1\(1J\) Cisco Application Policy Infrastructure Controller 1.1\(1O\) Cisco Application Policy Infrastructure Controller 1.1\(1R\) Cisco Application Policy Infrastructure Controller 1.1\(1S\) Cisco Application Policy Infrastructure Controller 1.1\(2H\) Cisco Application Policy Infrastructure Controller 1.1\(2I\) Cisco Application Policy Infrastructure Controller 1.1\(3F\) Cisco Application Policy Infrastructure Controller 1.1\(4E\) Cisco Application Policy Infrastructure Controller 1.1\(4F\) Cisco Application Policy Infrastructure Controller 1.1\(4G\) Cisco Application Policy Infrastructure Controller 1.1\(4I\) Cisco Application Policy Infrastructure Controller 1.1\(4L\) Cisco Application Policy Infrastructure Controller 1.1\(4M\) Cisco Application Policy Infrastructure Controller 1.1.3 Cisco Application Policy Infrastructure Controller 1.2\(1M\) Cisco Application Policy Infrastructure Controller 1.2\(2\) Cisco Application Policy Infrastructure Controller 1.2\(2I\) Cisco Application Policy Infrastructure Controller 1.2\(2J\) Cisco Application Policy Infrastructure Controller 1.2\(3\) Cisco Application Policy Infrastructure Controller 1.2\(3H\) Cisco Application Policy Infrastructure Controller 1.2\(3M\) Cisco Application Policy Infrastructure Controller 1.2.2 Cisco Application Policy Infrastructure Controller 1.2_Base Cisco Application Policy Infrastructure Controller 1.3\(1\) Cisco Application Policy Infrastructure Controller 1.3\(1I\) Cisco Application Policy Infrastructure Controller 1.3\(1J\) Cisco Application Policy Infrastructure Controller 1.3\(2\) Cisco Application Policy Infrastructure Controller 1.3\(2F\) Cisco Application Policy Infrastructure Controller 1.3\(2H\) Cisco Application Policy Infrastructure Controller 1.3\(2I\) Cisco Application Policy Infrastructure Controller 1.3\(2J\) Cisco Application Policy Infrastructure Controller 1.3\(2K\) Cisco Application Policy Infrastructure Controller 2.0\(1\) Cisco Application Policy Infrastructure Controller 2.0\(1N\) Cisco Application Policy Infrastructure Controller 2.0\(1O\) Cisco Application Policy Infrastructure Controller 2.0\(1P\) Cisco Application Policy Infrastructure Controller 2.0\(1Q\) Cisco Application Policy Infrastructure Controller 2.0\(1R\) Cisco Application Policy Infrastructure Controller 2.0\(2F\) Cisco Application Policy Infrastructure Controller 2.0\(2G\) Cisco Application Policy Infrastructure Controller 2.0\(2H\) Cisco Application Policy Infrastructure Controller 2.0\(2L\) Cisco Application Policy Infrastructure Controller 2.0\(2N\) Cisco Application Policy Infrastructure Controller 2.0\(2O\) Cisco Application Policy Infrastructure Controller 2.0_Base Cisco Application Policy Infrastructure Controller 2.1\(1I\) Cisco Application Policy Infrastructure Controller 2.1\(2E\) Cisco Application Policy Infrastructure Controller 2.1\(2G\) Cisco Application Policy Infrastructure Controller 2.1\(2K\) Cisco Application Policy Infrastructure Controller 2.1\(3G\) Cisco Application Policy Infrastructure Controller 2.1\(3H\) Cisco Application Policy Infrastructure Controller 2.1\(3J\) Cisco Application Policy Infrastructure Controller 2.1\(4A\) Cisco Application Policy Infrastructure Controller 2.2\(1O\) Cisco Application Policy Infrastructure Controller 2.2\(2E\) Cisco Application Policy Infrastructure Controller 2.2\(2F\) Cisco Application Policy Infrastructure Controller 2.2\(2J\) Cisco Application Policy Infrastructure Controller 2.2\(2K\) Cisco Application Policy Infrastructure Controller 2.2\(2Q\) Cisco Application Policy Infrastructure Controller 2.2\(3J\) Cisco Application Policy Infrastructure Controller 2.2\(3P\) Cisco Application Policy Infrastructure Controller 2.2\(3R\) Cisco Application Policy Infrastructure Controller 2.2\(3S\) Cisco Application Policy Infrastructure Controller 2.2\(3T\) Cisco Application Policy Infrastructure Controller 2.2\(4F\) Cisco Application Policy Infrastructure Controller 2.2\(4P\) Cisco Application Policy Infrastructure Controller 2.2\(4Q\) Cisco Application Policy Infrastructure Controller 2.2\(4R\) Cisco Application Policy Infrastructure Controller 2.3\(1F\) Cisco Application Policy Infrastructure Controller 2.3\(1I\) Cisco Application Policy Infrastructure Controller 2.3\(1L\) Cisco Application Policy Infrastructure Controller 2.3\(1O\) Cisco Application Policy Infrastructure Controller 2.3\(1P\) Cisco Application Policy Infrastructure Controller 3.0\(1K\) Cisco Application Policy Infrastructure Controller 3.0\(2H\) Cisco Application Policy Infrastructure Controller 3.0\(2K\) Cisco Application Policy Infrastructure Controller 3.0\(2N\) Cisco Application Policy Infrastructure Controller 3.0\(3I\) Cisco Application Policy Infrastructure Controller 3.1\(1I\) Cisco Application Policy Infrastructure Controller 3.1\(2M\) Cisco Application Policy Infrastructure Controller 3.1\(2O\) Cisco Application Policy Infrastructure Controller 3.1\(2P\) Cisco Application Policy Infrastructure Controller 3.1\(2Q\) Cisco Application Policy Infrastructure Controller 3.1\(2S\) Cisco Application Policy Infrastructure Controller 3.1\(2T\) Cisco Application Policy Infrastructure Controller 3.1\(2U\) Cisco Application Policy Infrastructure Controller 3.1\(2V\) Cisco Application Policy Infrastructure Controller 3.2\(1L\) Cisco Application Policy Infrastructure Controller 3.2\(1M\) Cisco Application Policy Infrastructure Controller 3.2\(2L\) Cisco Application Policy Infrastructure Controller 3.2\(2O\) Cisco Application Policy Infrastructure Controller 3.2\(3I\) Cisco Application Policy Infrastructure Controller 3.2\(3N\) Cisco Application Policy Infrastructure Controller 3.2\(3O\) Cisco Application Policy Infrastructure Controller 3.2\(3R\) Cisco Application Policy Infrastructure Controller 3.2\(3S\) Cisco Application Policy Infrastructure Controller 3.2\(4D\) Cisco Application Policy Infrastructure Controller 3.2\(4E\) Cisco Application Policy Infrastructure Controller 3.2\(5D\) Cisco Application Policy Infrastructure Controller 3.2\(5E\) Cisco Application Policy Infrastructure Controller 3.2\(5F\) Cisco Application Policy Infrastructure Controller 3.2\(6I\) Cisco Application Policy Infrastructure Controller 3.2\(7F\) Cisco Application Policy Infrastructure Controller 3.2\(7K\) Cisco Application Policy Infrastructure Controller 3.2\(9B\) Cisco Application Policy Infrastructure Controller 5.0\(2H\) Cisco Cloud Application Policy Infrastructure Controller 4.2\(6N\) Cisco Cloud Application Policy Infrastructure Controller * Cisco Cloud Application Policy Infrastructure Controller 5.0\(2H\)	155

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capic-mdvul-HBsJBuvW