Skip to content
fr Sign in
4.3 Medium

CVE-2021-1354 A vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software could…

Description

A vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager (UCSM). This vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to the registration API. A successful exploit could allow the attacker to register a rogue Cisco UCSM and gain access to Cisco UCS Central Software data and Cisco UCSM inventory data.

Affected products and versions

Product Affected versions Fixed in
Cisco Unified Computing System Central Software Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Unified Computing System Central Software

The 3 CVEs of Cisco Unified Computing System Central Software →
CVE-2026-76506 Cisco Unified Computing System Central Remote Code Execution Vulnerability 7.6 High CVE-2024-20280 A vulnerability in the backup feature of Cisco UCS Central Software could allow an attacker with access to a backup file… 6.3 Medium
Track this CVE