What is CVE-2021-1388?

CVE-2021-1388 is a critical-severity vulnerability in Cisco Aci_multi-site_orchestrator, classified under Improper Privilege Management. CVSS score: 10.0/10. Published 2021-02-24.

How severe is CVE-2021-1388?

Critical severity. CVSS v3 base score is 10.0 out of 10.

Privilege escalation in Cisco Aci_multi-site_orchestrator

CVE-2021-1388

A vulnerability in an API endpoint of Cisco ACI Multi-Site Orchestrator (MSO) installed on the Application Services Engine could allow an unauthenticated, remote attacker to bypass authentication on an affected device. The vulnerability is…

Vulnerability class: Privilege Escalation

EPSS: 0.144 (96.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Cisco Aci_multi-site_orchestrator
Cisco Application_policy_infrastructure_controller — versions 3.0\(3i\)
Cisco Aci Multi-site Orchestrator Software — versions n/a

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2021-1388?: CVE-2021-1388 is a critical-severity vulnerability in Cisco Aci_multi-site_orchestrator, classified under Improper Privilege Management. CVSS score: 10.0/10. Published 2021-02-24.
How severe is CVE-2021-1388?: Critical severity. CVSS v3 base score is 10.0 out of 10.