Command injection

2021-08-2520:15:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

JSON

Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform a command injection or file upload attack on an affected system. For more information about these vulnerabilities, see the Details section of this advisory.

CPENameOperatorVersion
application_policy_infrastructure_controllerge4.0
application_policy_infrastructure_controllerlt4.2
application_policy_infrastructure_controllereq< 3.210f
application_policy_infrastructure_controllerge5.0
application_policy_infrastructure_controllerlt5.2
cloud_application_policy_infrastructure_controllerge4.0
cloud_application_policy_infrastructure_controllerlt4.2
cloud_application_policy_infrastructure_controllereq< 3.210f
cloud_application_policy_infrastructure_controllerge5.0
cloud_application_policy_infrastructure_controllerlt5.2

Name	Operator	Version
application_policy_infrastructure_controller	ge	4.0
application_policy_infrastructure_controller	lt	4.2
application_policy_infrastructure_controller	eq	< 3.210f
application_policy_infrastructure_controller	ge	5.0
application_policy_infrastructure_controller	lt	5.2
cloud_application_policy_infrastructure_controller	ge	4.0
cloud_application_policy_infrastructure_controller	lt	4.2
cloud_application_policy_infrastructure_controller	eq	< 3.210f
cloud_application_policy_infrastructure_controller	ge	5.0
cloud_application_policy_infrastructure_controller	lt	5.2