What is CVE-2021-1276?

CVE-2021-1276 is a high-severity vulnerability in Cisco Data Center Network Manager, classified under Improper Certificate Validation. CVSS score: 7.5/10. Published 2021-01-20.

How severe is CVE-2021-1276?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Cisco Data Center Network Manager

CVE-2021-1276

Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) could allow an attacker to spoof a trusted host or construct a man-in-the-middle attack to extract sensitive information or alter certain API requests. These vulnerabilities are due to insufficient certificate validation when establishing HTTPS requests with the affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Vulnerability class: Improper Certificate Validation

EPSS: 0.004 (32.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Cisco Data Center Network Manager — versions n/a
Cisco Data_center_network_manager

Weakness classification (CWE)

CWE-295 — Improper Certificate Validation

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2021-1276?: CVE-2021-1276 is a high-severity vulnerability in Cisco Data Center Network Manager, classified under Improper Certificate Validation. CVSS score: 7.5/10. Published 2021-01-20.
How severe is CVE-2021-1276?: High severity. CVSS v3 base score is 7.5 out of 10.