Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 vulnerabilities
3 known CVE vulnerabilities in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0, translated and rated.
- CVE-2017-12262High
A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) could allow an unauthenticated attacker to gain access to services only available on the internal network of the device. The issue is due to an incorrect firewall rule that may forward traffic from the public interface to the internal virtual network of the APIC-EM.
- CVE-2016-1365High
The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafted upgrade parameter.
- CVE-2016-1386High
The API in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0(1) allows remote attackers to spoof administrative notifications via crafted attribute-value pairs.