CVE-2021-1354

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System Central Software (affected versions not specified)

Description A vulnerability in the certificate registration process could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager (UCSM) due to improper certificate validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to the "registration API". A successful exploit could allow the attacker to register a rogue Cisco UCSM and gain access to Cisco UCS Central Software data and Cisco UCSM inventory data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.