cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2024-20478,https://securityvulnerability.io/vulnerability/CVE-2024-20478,Cisco APIC Vulnerability Could Lead to Arbitrary Code Injection,"A vulnerability in the software upgrade component of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Network Controller, formerly Cisco Cloud APIC, could allow an authenticated, remote attacker with Administrator-level privileges to install a modified software image, leading to arbitrary code injection on an affected system.

This vulnerability is due to insufficient signature validation of software images. An attacker could exploit this vulnerability by installing a modified software image. A successful exploit could allow the attacker to execute arbitrary code on the affected system and elevate their privileges to root.
Note: Administrators should always validate the hash of any upgrade image before uploading it to Cisco APIC and Cisco Cloud Network Controller.",Cisco,Cisco Application Policy Infrastructure Controller (apic),6.5,MEDIUM,0.0004299999854993075,false,,false,false,true,2024-08-30T04:15:03.000Z,,false,false,,2024-08-28T17:15:00.000Z,0
CVE-2023-20230,https://securityvulnerability.io/vulnerability/CVE-2023-20230,Access Control Flaw in Cisco APIC Affecting Multi-Tenant Policies,"A vulnerability in the implementation of restricted security domains in Cisco's Application Policy Infrastructure Controller (APIC) could permit an authenticated remote attacker to read, modify, or delete non-tenant policies. This issue arises from improper access control measures allowing access to security domain policies beyond tenant boundaries. An attacker with a valid user account within a restricted security domain can exploit this vulnerability, leading to unauthorized manipulation of policies associated with other security domains. It is essential to note that policies under tenants that the attacker is not authorized to access remain protected against exploitation.",Cisco,Cisco Application Policy Infrastructure Controller (apic),5.4,MEDIUM,0.0006699999794363976,false,,false,false,true,2024-10-01T16:15:05.000Z,,false,false,,2023-08-23T19:15:00.000Z,0
CVE-2023-20011,https://securityvulnerability.io/vulnerability/CVE-2023-20011,Cisco Application Policy Infrastructure Controller and Cisco Cloud Network Controller Cross-Site Request Forgery Vulnerability,"A cross-site request forgery vulnerability has been discovered in the web management interface of Cisco's Application Policy Infrastructure Controller and Cloud Network Controller. This issue arises from inadequate CSRF protections, allowing unauthenticated remote attackers to exploit the system by deceiving users into clicking malicious links. If successfully exploited, attackers could perform actions with the same privileges as the targeted user, including modifying system configurations or creating new privileged accounts, thereby posing a significant risk to system integrity and security.",Cisco,Cisco Application Policy Infrastructure Controller (apic),8.8,HIGH,0.0008399999933317304,false,,false,false,true,2024-10-28T17:15:04.000Z,,false,false,,2023-02-23T00:00:00.000Z,0
CVE-2021-1580,https://securityvulnerability.io/vulnerability/CVE-2021-1580,Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities,"Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform a command injection or file upload attack on an affected system. For more information about these vulnerabilities, see the Details section of this advisory.",Cisco,Cisco Application Policy Infrastructure Controller (apic),6.5,MEDIUM,0.0017600000137463212,false,,false,false,true,2024-08-03T17:16:02.000Z,,false,false,,2021-08-25T00:00:00.000Z,0
CVE-2021-1578,https://securityvulnerability.io/vulnerability/CVE-2021-1578,Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability,"A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an authenticated, remote attacker to elevate privileges to Administrator on an affected device. This vulnerability is due to an improper policy default setting. An attacker could exploit this vulnerability by using a non-privileged credential for Cisco ACI Multi-Site Orchestrator (MSO) to send a specific API request to a managed Cisco APIC or Cloud APIC device. A successful exploit could allow the attacker to obtain Administrator credentials on the affected device.",Cisco,Cisco Application Policy Infrastructure Controller (apic),8.8,HIGH,0.0028099999763071537,false,,false,false,true,2024-08-03T17:16:02.000Z,,false,false,,2021-08-25T00:00:00.000Z,0
CVE-2021-1579,https://securityvulnerability.io/vulnerability/CVE-2021-1579,Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability,"A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an authenticated, remote attacker with Administrator read-only credentials to elevate privileges on an affected system. This vulnerability is due to an insufficient role-based access control (RBAC). An attacker with Administrator read-only credentials could exploit this vulnerability by sending a specific API request using an app with admin write credentials. A successful exploit could allow the attacker to elevate privileges to Administrator with write privileges on the affected device.",Cisco,Cisco Application Policy Infrastructure Controller (apic),8.1,HIGH,0.0016499999910593033,false,,false,false,true,2024-08-03T17:16:02.000Z,,false,false,,2021-08-25T00:00:00.000Z,0
CVE-2021-1581,https://securityvulnerability.io/vulnerability/CVE-2021-1581,Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities,"Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform a command injection or file upload attack on an affected system. For more information about these vulnerabilities, see the Details section of this advisory.",Cisco,Cisco Application Policy Infrastructure Controller (apic),6.5,MEDIUM,0.0013200000394135714,false,,false,false,true,2024-08-03T17:16:02.000Z,,false,false,,2021-08-25T00:00:00.000Z,0
CVE-2021-1582,https://securityvulnerability.io/vulnerability/CVE-2021-1582,Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability,"A vulnerability in the web UI of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow an authenticated, remote attacker to perform a stored cross-site scripting attack on an affected system. This vulnerability is due to improper input validation in the web UI. An authenticated attacker could exploit this vulnerability by sending malicious input to the web UI. A successful exploit could allow the attacker to execute arbitrary script code in the context of the web-based interface or access sensitive, browser-based information.",Cisco,Cisco Application Policy Infrastructure Controller (apic),5.4,MEDIUM,0.0006600000197067857,false,,false,false,true,2024-08-03T17:16:02.000Z,,false,false,,2021-08-25T00:00:00.000Z,0
CVE-2021-1577,https://securityvulnerability.io/vulnerability/CVE-2021-1577,Cisco Application Policy Infrastructure Controller Arbitrary File Read and Write Vulnerability,"A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an unauthenticated, remote attacker to read or write arbitrary files on an affected system. This vulnerability is due to improper access control. An attacker could exploit this vulnerability by using a specific API endpoint to upload a file to an affected device. A successful exploit could allow the attacker to read or write arbitrary files on an affected device.",Cisco,Cisco Application Policy Infrastructure Controller (apic),9.1,CRITICAL,0.003809999907389283,false,,false,false,true,2024-08-03T17:16:02.000Z,,false,false,,2021-08-25T00:00:00.000Z,0
CVE-2020-3333,https://securityvulnerability.io/vulnerability/CVE-2020-3333,Cisco Application Services Engine Software Unauthenticated Event Policies Update Vulnerability,"A vulnerability in the API of Cisco Application Services Engine Software could allow an unauthenticated, remote attacker to update event policies on an affected device. The vulnerability is due to insufficient authentication of users who modify policies on an affected device. An attacker could exploit this vulnerability by crafting a malicious HTTP request to contact an affected device. A successful exploit could allow the attacker to update event policies on the affected device.",Cisco,Cisco Application Policy Infrastructure Controller (apic),5.3,MEDIUM,0.0013599999947473407,false,,false,false,true,2024-08-04T08:16:35.000Z,,false,false,,2020-06-03T00:00:00.000Z,0
CVE-2020-3335,https://securityvulnerability.io/vulnerability/CVE-2020-3335,Cisco Application Services Engine Software Authorization Vulnerability,"A vulnerability in the key store of Cisco Application Services Engine Software could allow an authenticated, local attacker to read sensitive information of other users on an affected device. The vulnerability is due to insufficient authorization limitations. An attacker could exploit this vulnerability by logging in to an affected device locally with valid credentials. A successful exploit could allow the attacker to read the sensitive information of other users on the affected device.",Cisco,Cisco Application Policy Infrastructure Controller (apic),5.5,MEDIUM,0.0004199999966658652,false,,false,false,true,2024-08-04T08:16:35.000Z,,false,false,,2020-06-03T00:00:00.000Z,0
CVE-2020-3139,https://securityvulnerability.io/vulnerability/CVE-2020-3139,Cisco Application Policy Infrastructure Controller Out Of Band Management IP Tables Bypass Vulnerability,"A vulnerability in the out of band (OOB) management interface IP table rule programming for Cisco Application Policy Infrastructure Controller (APIC) could allow an unauthenticated, remote attacker to bypass configured deny entries for specific IP ports. These IP ports would be permitted to the OOB management interface when, in fact, the packets should be dropped. The vulnerability is due to the configuration of specific IP table entries for which there is a programming logic error that results in the IP port being permitted. An attacker could exploit this vulnerability by sending traffic to the OOB management interface on the targeted device. A successful exploit could allow the attacker to bypass configured IP table rules to drop specific IP port traffic. The attacker has no control over the configuration of the device itself. This vulnerability affects Cisco APIC releases prior to the first fixed software Release 4.2(3j).",Cisco,Cisco Application Policy Infrastructure Controller (apic),5.3,MEDIUM,0.0012100000167265534,false,,false,false,false,,,false,false,,2020-01-26T05:15:00.000Z,0
CVE-2019-1889,https://securityvulnerability.io/vulnerability/CVE-2019-1889,Cisco Application Policy Infrastructure Controller REST API Privilege Escalation Vulnerability,"A vulnerability in the REST API for software device management in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an authenticated, remote attacker to escalate privileges to root on an affected device. The vulnerability is due to incomplete validation and error checking for the file path when specific software is uploaded. An attacker could exploit this vulnerability by uploading malicious software using the REST API. A successful exploit could allow an attacker to escalate their privilege level to root. The attacker would need to have the administrator role on the device.",Cisco,Cisco Application Policy Infrastructure Controller (apic),7.2,HIGH,0.0022899999748915434,false,,false,false,true,2024-08-04T19:16:16.000Z,,false,false,,2019-07-04T20:15:00.000Z,0
CVE-2019-1838,https://securityvulnerability.io/vulnerability/CVE-2019-1838,Cisco Application Policy Infrastructure Controller Web-Based Management Interface Cross-Site Scripting Vulnerability,"A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. This vulnerability has been fixed in software version 14.1(1i).",Cisco,Cisco Application Policy Infrastructure Controller (apic),5.4,MEDIUM,0.0006600000197067857,false,,false,false,true,2024-08-04T19:16:13.000Z,,false,false,,2019-05-03T17:29:00.000Z,0
CVE-2019-1587,https://securityvulnerability.io/vulnerability/CVE-2019-1587,Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Filter Query Information Disclosure Vulnerability,"A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated, remote attacker to access sensitive information. The vulnerability occurs because the affected software does not properly validate user-supplied input. An attacker could exploit this vulnerability by issuing certain commands with filtered query results on the device. This action may cause returned messages to display confidential system information. A successful exploit could allow the attacker to read sensitive information on the device.",Cisco,Cisco Application Policy Infrastructure Controller (apic),4.3,MEDIUM,0.0007300000288523734,false,,false,false,true,2024-08-04T19:15:58.000Z,,false,false,,2019-05-03T15:29:00.000Z,0
CVE-2019-1682,https://securityvulnerability.io/vulnerability/CVE-2019-1682,Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability,"A vulnerability in the FUSE filesystem functionality for Cisco Application Policy Infrastructure Controller (APIC) software could allow an authenticated, local attacker to escalate privileges to root on an affected device. The vulnerability is due to insufficient input validation for certain command strings issued on the CLI of the affected device. An attacker with write permissions for files within a readable folder on the device could alter certain definitions in the affected file. A successful exploit could allow an attacker to cause the underlying FUSE driver to execute said crafted commands, elevating the attacker's privileges to root on an affected device.",Cisco,Cisco Application Policy Infrastructure Controller (apic),7.8,HIGH,0.0004199999966658652,false,,false,false,true,2024-08-04T19:16:04.000Z,,false,false,,2019-05-03T15:29:00.000Z,0
CVE-2019-1692,https://securityvulnerability.io/vulnerability/CVE-2019-1692,Cisco Application Policy Infrastructure Controller Web-Based Management Interface Usage Information Disclosure Vulnerability,"A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, remote attacker to access sensitive system usage information. The vulnerability is due to a lack of proper data protection mechanisms for certain components in the underlying Application Centric Infrastructure (ACI). An attacker could exploit this vulnerability by attempting to observe certain network traffic when accessing the APIC. A successful exploit could allow the attacker to access and collect certain tracking data and usage statistics on an affected device.",Cisco,Cisco Application Policy Infrastructure Controller (apic),5.3,MEDIUM,0.0007900000200606883,false,,false,false,true,2024-08-04T19:16:05.000Z,,false,false,,2019-05-03T15:29:00.000Z,0
CVE-2019-1586,https://securityvulnerability.io/vulnerability/CVE-2019-1586,Cisco Application Policy Infrastructure Controller Recoverable Encryption Key Vulnerability,"A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, local attacker with physical access to obtain sensitive information from an affected device. The vulnerability is due to insecure removal of cleartext encryption keys stored on local partitions in the hard drive of an affected device. An attacker could exploit this vulnerability by retrieving data from the physical disk on the affected partition(s). A successful exploit could allow the attacker to retrieve encryption keys, possibly allowing the attacker to further decrypt other data and sensitive information on the device, which could lead to the disclosure of confidential information.",Cisco,Cisco Application Policy Infrastructure Controller (apic),4.6,MEDIUM,0.0005200000014156103,false,,false,false,true,2024-08-04T19:15:58.000Z,,false,false,,2019-05-03T15:29:00.000Z,0
CVE-2019-1690,https://securityvulnerability.io/vulnerability/CVE-2019-1690,Cisco Application Policy Infrastructure Controller IPv6 Link-Local Address Vulnerability,"A vulnerability in the management interface of Cisco Application Policy Infrastructure Controller (APIC) software could allow an unauthenticated, adjacent attacker to gain unauthorized access on an affected device. The vulnerability is due to a lack of proper access control mechanisms for IPv6 link-local connectivity imposed on the management interface of an affected device. An attacker on the same physical network could exploit this vulnerability by attempting to connect to the IPv6 link-local address on the affected device. A successful exploit could allow the attacker to bypass default access control restrictions on an affected device. Cisco Application Policy Infrastructure Controller (APIC) devices running versions prior to 4.2(0.21c) are affected.",Cisco,Cisco Application Policy Infrastructure Controller (apic),4.3,MEDIUM,0.0005499999970197678,false,,false,false,true,2024-08-04T19:16:04.000Z,,false,false,,2019-03-11T21:29:00.000Z,0