PT-2021-1921

CVE-2021-1266

·

Published

2021-02-03

·

Updated

2021-02-08

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Cisco Managed Services Accelerator (affected versions not specified)
Description The issue is related to an uncontrolled resource consumption in the REST API implementation of the Cisco Managed Services Accelerator platform. This could allow a remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the way the affected software logs certain API requests. An attacker could exploit this by sending a flood of crafted API requests to an affected device, potentially causing a DoS condition.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾