CVE Feed

    Dashboard / CVE / CVE-2021-1277

    CVE-2021-1277

    Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) could allow an attacker to spoof a trusted host or construct a man-in-the-middle attack to extract sensitive information or alter certain API requests. These vulnerabilities are due to insufficient certificate validation when establishing HTTPS requests with the affected device. For more information about these vulnerabilities, see the Details section of this advisory.

    Published:Jan 20, 2021
    Last Modified:Nov 21, 2024
    EPS:Jan 20, 2021
    EPSS Score:0.00116
    CVSS Score:7.5

    Affected Products

    Vendor
    Cisco
    Product
    Data Center Network Manager

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-295 Improper Certificate Validation

    Related CVEs

    CVE-2020-3538 (CVSS 4.6) — A vulnerability in a certain REST API endpoint of Cisco Data Center Network Manager (DCNM) Software could…
    CVE-2020-3539 (CVSS 6.3) — A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow …
    CVE-2024-20536 (CVSS 8.8) — A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Cont…
    CVE-2024-20449 (CVSS 8.8) — A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacke…
    CVE-2024-20444 (CVSS 5.5) — A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager …
    CVE-2024-20432 (CVSS 9.9) — A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an au…
    CVE-2023-44487 (CVSS 7.5) — The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can …
    CVE-2021-44228 (CVSS 10) — Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features u…
    CVE-2021-1135 (CVSS 4.6) — Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an a…
    CVE-2021-1250 (CVSS 6.5) — Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) cou…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High