CVE-2021-1601

Name of the Vulnerable Software and Affected Versions Cisco Intersight Virtual Appliance (affected versions not specified)

Description The issue is related to insufficient access control in the Cisco Intersight Virtual Appliance, which could allow an unauthenticated, adjacent attacker to access sensitive internal services from an external interface. This is due to insufficient restrictions for IPv4 or IPv6 packets received on the external management interface. An attacker could exploit this by sending specific traffic to the interface on an affected device, potentially allowing access to sensitive internal services and configuration changes on the affected device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.