[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMl31KzLWsA5fmcdobVlpz_AOXDPYpm5AuUM5-Mu7ck0":3,"g5a-risk:CVE-2021-1577":127},{"success":4,"data":5,"meta":125},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":27,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":56,"references":57,"referencesCount":63,"weaknesses":64,"weaknessesCount":63,"isActivelyExploited":73,"cisaInfo":27,"otxData":27,"relatedBlogPosts":74,"seoMetadata":75,"configurations":100,"relatedVendorCves":123,"notableEvents":124},"CVE-2021-1577","What is CVE-2021-1577?","A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an unauthenticated, remote attacker to read or write arbitrary files on an affected system. This vulnerability is due to improper access control. An attacker could exploit this vulnerability by using a specific API endpoint to upload a file to an affected device. A successful exploit could allow the attacker to read or write arbitrary files on an affected device.","A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller ...","2021-08-25T20:15:09.883","2023-11-07T03:28:40.65",9.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":34,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.2,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"d1c1063e-7a18-46af-9102-31f8928bc633","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[35],{"Source":17,"Type":18,"CVSSData":36,"BaseSeverity":41,"ExploitabilityScore":42,"ImpactScore":43,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":37,"VectorString":38,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":39,"IntegrityImpact":39,"AvailabilityImpact":23,"BaseScore":40,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:N","PARTIAL",6.4,"MEDIUM",10,4.9,0.01303,[44,44,44,44,44,44,44],"Critical",[48,53],{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"cisco","application_policy_infrastructure_controller","*","cpe:2.3:a:cisco:application_policy_infrastructure_controller:*:*:*:*:*:*:*:*",{"vendor":49,"product":54,"version":51,"criteria":55,"vulnerable":4},"cloud_application_policy_infrastructure_controller","cpe:2.3:a:cisco:cloud_application_policy_infrastructure_controller:*:*:*:*:*:*:*:*",2,[58],{"url":59,"source":60,"tags":61},"https:\u002F\u002Ftools.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-capic-frw-Nt3RYxR2","Cisco",[62],"Vendor Advisory",1,[65],{"id":66,"name":67,"description":68,"extendedDescription":69,"status":70,"abstraction":71,"structure":72},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar","Simple",false,[],{"title":76,"metaDescription":77,"keywords":78,"canonicalUrl":79,"structuredData":80},"What is CVE-2021-1577? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-1577, a critical severity cyber security vulnerability from 2021. A vulnerability in an API endpoint of Cisco Application ...","CVE-2021-1577, CVE-2021-1577 vulnerability, CVE-2021-1577 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, cisco security, application_policy_infrastructure_controller vulnerability, cloud_application_policy_infrastructure_controller vulnerability","\u002Fwhat-is\u002Fcve-2021-1577",{"@context":81,"@type":82,"headline":76,"description":77,"datePublished":10,"dateModified":11,"author":83,"publisher":87,"about":91,"mainEntityOfPage":95,"articleSection":98,"keywords":99},"https:\u002F\u002Fschema.org","TechArticle",{"@type":84,"name":85,"url":86},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":84,"name":85,"url":86,"logo":88},{"@type":89,"url":90},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":92,"name":6,"description":93,"additionalType":94},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":96,"@id":97},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-1577","Cybersecurity","CVE-2021-1577, CVE-2021-1577 vulnerability, CVE-2021-1577 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[101],{"Operator":27,"Negate":27,"Nodes":102},[103],{"Operator":104,"Negate":27,"CPEMatch":105},"OR",[106,109,113,117,119,121],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":107,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":108,"VersionEndIncluding":27},"FBD10720-FB92-47CF-9F2B-90D09945DE86","3.2\\(10e\\)",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":110,"VersionStartExcluding":27,"VersionStartIncluding":111,"VersionEndExcluding":112,"VersionEndIncluding":27},"3F9513E4-EC22-40D0-9339-49926BEB9947","4.0","4.2\\(6h\\)",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":114,"VersionStartExcluding":27,"VersionStartIncluding":115,"VersionEndExcluding":116,"VersionEndIncluding":27},"1DEF7843-7BCB-47A7-AD56-A102AC67BD47","5.0","5.1\\(3e\\)",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":118,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":108,"VersionEndIncluding":27},"09451843-4634-4B4F-B005-7CB1747B244D",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":120,"VersionStartExcluding":27,"VersionStartIncluding":111,"VersionEndExcluding":112,"VersionEndIncluding":27},"CAA718C7-5A6D-406A-9AC7-E339BB652F0C",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":122,"VersionStartExcluding":27,"VersionStartIncluding":115,"VersionEndExcluding":116,"VersionEndIncluding":27},"9DCB6614-D3C4-46A9-88D5-00D28E74485D",[],[],{"lastModified":11,"cacheTime":126,"version":37},1792368457428,{"score":128,"band":129,"action":130,"scoredAt":131},54,"Medium","Plan remediation","2026-10-16T06:51:55.027989+00:00"]