What is CVE-2021-1600?

CVE-2021-1600 is a high-severity vulnerability in Cisco Intersight Virtual Appliance, classified under Improper Access Control. CVSS score: 8.3/10. Published 2021-07-22.

How severe is CVE-2021-1600?

High severity. CVSS v3 base score is 8.3 out of 10.

Vulnerability in Cisco Intersight Virtual Appliance

CVE-2021-1600

Multiple vulnerabilities in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent attacker to access sensitive internal services from an external interface. These vulnerabilities are due to insufficient restrictions for IPv4 or IPv6 packets that are received on the external management interface. An attacker could exploit these vulnerabilities by sending specific traffic to this interface on an affected device. A successful exploit could allow the attacker to access sensitive internal services and make configuration changes on the affected device.

EPSS: 0.004 (32.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.3 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H.

Affected products

Cisco Intersight Virtual Appliance — versions n/a
Cisco Intersight_virtual_appliance — versions 1.0\(1\)

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2021-1600?: CVE-2021-1600 is a high-severity vulnerability in Cisco Intersight Virtual Appliance, classified under Improper Access Control. CVSS score: 8.3/10. Published 2021-07-22.
How severe is CVE-2021-1600?: High severity. CVSS v3 base score is 8.3 out of 10.