How severe is CVE-2021-1579?

High severity. CVSS v3 base score is 8.1 out of 10.

Privilege escalation in Cisco Application_policy_infrastructure_controller

CVE-2021-1579

A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an authenticated, remote attacker with Administrator read…

EPSS: 0.021 (79.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H.

Affected products

Cisco Application_policy_infrastructure_controller
Cisco Application Policy Infrastructure Controller (Apic) — versions n/a
Cisco Cloud_application_policy_infrastructure_controller

Weakness classification (CWE)

CWE-250
CWE-269 — Improper Privilege Management

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2021-1579?: CVE-2021-1579 is a high-severity vulnerability in Cisco Application_policy_infrastructure_controller, classified under CWE-250. CVSS score: 8.1/10. Published 2021-08-25.
How severe is CVE-2021-1579?: High severity. CVSS v3 base score is 8.1 out of 10.