Cisco Application Policy Infrastructure Controller Linux Kernel IP Fragment Reassembly DoS

According to its self-reported version, the Cisco Application Policy Infrastructure Controller APIC is affected by a vulnerability in the IP stack that is used by the Linux Kernel publicly known as FragmentSmack. The vulnerability could allow an unauthenticated, remote attacker to cause a denial ...

The vulnerability of the Cisco Application Policy Infrastructure Controller, related to deficiencies in access control, allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Cisco Application Policy Infrastructure Controller, a component of the information infrastructure management system, is related to deficiencies in access control when connecting via IPv6 protocol. Exploiting this vulnerability could allow an attacker acting locally to gai...

CVE-2019-1690: Improper Access Control

A vulnerability in the management interface of Cisco Application Policy Infrastructure Controller APIC software could allow an unauthenticated, adjacent attacker to gain unauthorized access on an affected device. The vulnerability is due to a lack of proper access control mechanisms for IPv6...

Cisco Application Policy Infrastructure Controller Access Control Error Vulnerability

Cisco Application Policy Infrastructure Controller APIC is an automated infrastructure deployment and governance solution from Cisco. An access control error vulnerability exists in the management interface in Cisco APIC, which stems from the program's lack of an access control mechanism for IPv6...

Cisco Application Policy Infrastructure Controller Local Command Injection and Privilege Escalation Vulnerability

A vulnerability in certain system script files that are installed at boot time on Cisco Application Policy Infrastructure Controllers could allow an authenticated, local attacker to gain elevated privileges and execute arbitrary commands with root privileges on an affected host operating system...

Cisco APIC-EM 1.x < 1.5 Unauthorized Access (credentialed check)

According to its self-reported version number, the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM application running on the remote host is 1.x prior to 1.5. It is, therefore, affected by a vulnerability within the firewall configuration of the Cisco Application Poli...

CVE-2017-12262: Improper Access Control

A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device. The vulnerability is...

Cisco Releases Security Updates

Cisco has released updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply the...

Design/Logic Flaw

A vulnerability in Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to gain higher privileges than the account is assigned. The attacker will be granted the privileges of the last user to log in, regardless of whether those privileges are highe...

CVE-2017-6767: Improper Privilege Management

A vulnerability in Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to gain higher privileges than the account is assigned. The attacker will be granted the privileges of the last user to log in, regardless of whether those privileges are highe...

CVE-2017-6768: Untrusted Search Path

A vulnerability in the build procedure for certain executable system files installed at boot time on Cisco Application Policy Infrastructure Controller APIC devices could allow an authenticated, local attacker to gain root-level privileges. The vulnerability is due to a custom executable system...

Cisco Application Policy Infrastructure Controller Elevation of Privilege Vulnerability

The Cisco Application Policy Infrastructure Controller is Cisco's robust all-in-one architecture for transport networks. A security vulnerability in the Cisco Application Policy Infrastructure Controller RBAC privilege assignment allows remote attackers to exploit the vulnerability by submitting...

Cisco Application Policy Infrastructure Controller Local Elevation of Privilege Vulnerability

The Cisco Application Policy Infrastructure Controller is a robust all-in-one architecture for transport networks. Cisco Application Policy Infrastructure Controller has a security vulnerability in the installation file that allows a local attacker to exploit the vulnerability to submit special...

CVE-2016-6457: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure ACI could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on the affected device. This vulnerability affects Cisco Nexus 9000 Series Leaf Switches TO...

Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability

A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure ACI could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on the affected device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions...

CVE-2016-6413: Undefined Security Weakness

The installation procedure on Cisco Application Policy Infrastructure Controller APIC devices 1.32f mishandles binary files, which allows local users to obtain root access via unspecified vectors, aka Bug ID CSCva50496...

Cisco Application Policy Infrastructure Controller Access Bypass Vulnerability

Cisco Application Policy Infrastructure Controller is prone to an access bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cisco Application Policy Infrastructure Controller Enterprise Module Remote Code Execution Vulnerability

A vulnerability in the Grapevine update process of the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system with the privileges of the root user...

CVE-2016-1365: Improper Input Validation

The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafted upgrade parameter, aka Bug ID CSCux15507...

Cisco Application Policy Infrastructure Controller Elevation of Privilege Vulnerability (CNVD-2016-03960)

The Cisco Application Policy Infrastructure Controller provides centralized access to all group structure information, optimizes applications, and supports application configuration. Cisco Application Policy Infrastructure Controller APIC devices prior to software version 1.32f, the installation...