CVE-2016-1386
HighSummary
The API in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0(1) allows remote attackers to spoof administrative notifications via crafted attribute-value pairs.
Risk Assessment
Attackers may exploit this vulnerability to mislead administrators, potentially leading to unauthorized changes in system configuration.
Recommendation
It is recommended to upgrade to the latest version of APIC-EM to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0(1)
See all- CVE-2017-12262High
A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) could allow an unauthenticated attacker to gain access to services only available on the internal network of the device. The issue is due to an incorrect firewall rule that may forward traffic from the public interface to the internal virtual network of the APIC-EM.
- CVE-2016-1365High
The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafted upgrade parameter.
Original NVD description (English source)
The API in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0(1) allows remote attackers to spoof administrative notifications via crafted attribute-value pairs, aka Bug ID CSCux15521.