CVE-2021-1396

Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create diagnostic files, and make limited configuration changes. For more information about these vulnerabilities, see the Details section of this advisory.
Configurations

Configuration 1 (hide)

cpe:2.3:a:cisco:application_services_engine:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1.3:c:*:*:*:*:*:*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1.3:d:*:*:*:*:*:*

History

02 Mar 2021, 14:01

Type Values Removed Values Added
References (CISCO) https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-case-mvuln-dYrDPC6w - (CISCO) https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-case-mvuln-dYrDPC6w - Vendor Advisory
CPE cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1.3:d:*:*:*:*:*:*
cpe:2.3:a:cisco:application_services_engine:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1.3:c:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : 6.4
v3 : 6.5

24 Feb 2021, 20:38

Type Values Removed Values Added
New CVE

Information

Published : 2021-02-24 20:15

Updated : 2023-12-10 13:41


NVD link : CVE-2021-1396

Mitre link : CVE-2021-1396

CVE.ORG link : CVE-2021-1396


JSON object : View

Products Affected

cisco

  • application_policy_infrastructure_controller
  • application_services_engine
CWE
CWE-306

Missing Authentication for Critical Function