ID
VAR-202101-1048
CVE
CVE-2021-1265
TITLE
Cisco DNA Center Vulnerability of important information in plaintext
Trust: 0.8
DESCRIPTION
A vulnerability in the configuration archive functionality of Cisco DNA Center could allow any privilege-level authenticated, remote attacker to obtain the full unmasked running configuration of managed devices. The vulnerability is due to the configuration archives files being stored in clear text, which can be retrieved by various API calls. An attacker could exploit this vulnerability by authenticating to the device and executing a series of API calls. A successful exploit could allow the attacker to retrieve the full unmasked running configurations of managed devices. Cisco DNA Center Contains a vulnerability in the plaintext storage of important information.Information may be obtained. Cisco DNA Center is a network management and command center service of Cisco (Cisco)
Trust: 1.8
AFFECTED PRODUCTS
| vendor: | cisco | model: | dna center | scope: | lt | version: | 2.1.1.0 | Trust: 1.0 |
| vendor: | シスコシステムズ | model: | cisco dna center | scope: | eq | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-312 | Trust: 1.1 |
| problemtype: | Plaintext storage of important information (CWE-312) [ Other ] | Trust: 0.8 |
THREAT TYPE
remote
Trust: 0.6
TYPE
other
Trust: 0.6
PATCH
| title: | cisco-sa-dnacid-OfeeRjcn | url: | https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnacid-OfeeRjcn | Trust: 0.8 |
| title: | Cisco DNA Center Security vulnerabilities | url: | http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=139811 | Trust: 0.6 |
| title: | Cisco: Cisco DNA Center Information Disclosure Vulnerability | url: | https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts&qid=cisco-sa-dnacid-OfeeRjcn | Trust: 0.1 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2021-1265 | Trust: 2.6 |
| db: | JVNDB | id: | JVNDB-2021-002605 | Trust: 0.8 |
| db: | AUSCERT | id: | ESB-2021.0243 | Trust: 0.6 |
| db: | CNNVD | id: | CNNVD-202101-1553 | Trust: 0.6 |
| db: | VULHUB | id: | VHN-374319 | Trust: 0.1 |
| db: | VULMON | id: | CVE-2021-1265 | Trust: 0.1 |
REFERENCES
| url: | https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-dnacid-ofeerjcn | Trust: 2.5 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2021-1265 | Trust: 1.4 |
| url: | https://www.auscert.org.au/bulletins/esb-2021.0243/ | Trust: 0.6 |
| url: | https://cwe.mitre.org/data/definitions/312.html | Trust: 0.1 |
| url: | https://nvd.nist.gov | Trust: 0.1 |
SOURCES
| db: | VULHUB | id: | VHN-374319 |
| db: | VULMON | id: | CVE-2021-1265 |
| db: | JVNDB | id: | JVNDB-2021-002605 |
| db: | CNNVD | id: | CNNVD-202101-1553 |
| db: | NVD | id: | CVE-2021-1265 |
LAST UPDATE DATE
2024-08-14T13:04:23.137000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-374319 | date: | 2021-01-27T00:00:00 |
| db: | VULMON | id: | CVE-2021-1265 | date: | 2021-01-27T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-002605 | date: | 2021-09-27T09:05:00 |
| db: | CNNVD | id: | CNNVD-202101-1553 | date: | 2021-02-01T00:00:00 |
| db: | NVD | id: | CVE-2021-1265 | date: | 2021-01-27T16:50:57.907 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-374319 | date: | 2021-01-20T00:00:00 |
| db: | VULMON | id: | CVE-2021-1265 | date: | 2021-01-20T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-002605 | date: | 2021-09-27T00:00:00 |
| db: | CNNVD | id: | CNNVD-202101-1553 | date: | 2021-01-20T00:00:00 |
| db: | NVD | id: | CVE-2021-1265 | date: | 2021-01-20T20:15:15.407 |