Cisco Security Advisory - Cisco Application Policy Infrastructure Controller Arbitrary File Read and Write Vulnerability

[Netwörkheäd]

Cisco Application Policy Infrastructure Controller Arbitrary File Read and Write Vulnerability

<p>A vulnerability in an API endpoint of Cisco&nbsp;Application Policy Infrastructure Controller (APIC) and Cisco&nbsp;Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an unauthenticated, remote attacker to read or write arbitrary files on an affected system.</p>
<p>This vulnerability is due to improper access control. An attacker could exploit this vulnerability by using a specific API endpoint to upload a file to an affected device. A successful exploit could allow the attacker to read or write arbitrary files on an affected device.</p>
<p>Cisco&nbsp;has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p>
<p>This advisory is available at the following link: <br><a href="https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capic-frw-Nt3RYxR2" target="_blank" rel="noopener">https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capic-frw-Nt3RYxR2</a></p>

     
         
Security Impact Rating:  Critical
   
   
       
CVE: CVE-2021-1577
Source: Cisco Application Policy Infrastructure Controller Arbitrary File Read and Write Vulnerability