Skip to main content

Data Center Network Manager CVE-2021-1255

MEDIUM
Incomplete List of Disallowed Inputs (CWE-184)
2021-01-20 psirt@cisco.com
Cisco Information Disclosure Data Center Network Manager
5.4
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.4 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None

Lifecycle Timeline

1
CVE Published
Jan 20, 2021 - 20:15 nvd
MEDIUM 5.4

DescriptionNVD

Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information about these vulnerabilities, see the Details section of this advisory.

AnalysisAI

Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-184. Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information about these vulnerabilities, see the Details section of this advisory. Affected products include: Cisco Data Center Network Manager.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Data Center Network Manager

View all
CVE-2019-1620 CRITICAL POC
9.8 Jun 27

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthe
CVE-2019-1619 CRITICAL POC
9.8 Jun 27

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthe
CVE-2019-1622 MEDIUM POC
5.3 Jun 27

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthe
CVE-2019-1621 HIGH POC
7.5 Jun 27

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthe
CVE-2020-3382 CRITICAL
9.8 Jul 31

A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attac
CVE-2020-3376 CRITICAL
9.8 Jul 31

A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an unauthentic
CVE-2017-12343 HIGH
8.8 Nov 30

Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject ar
CVE-2021-1247 HIGH
8.8 Jan 20

Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authen
CVE-2021-1272 HIGH
8.8 Jan 20

A vulnerability in the session validation feature of Cisco Data Center Network Manager (DCNM) could allow an unauthentic
CVE-2020-3386 HIGH
8.8 Jul 31

A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remot
CVE-2020-3383 HIGH
8.8 Jul 31

A vulnerability in the archive utility of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote

CVE-2020-3377 HIGH
8.8 Jul 31

A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an authenticat

Same weakness CWE-184 – Incomplete List of Disallowed Inputs

View all
CVE-2026-34415 CRITICAL POC
9.3
CVE-2026-41264 CRITICAL POC
9.2
CVE-2024-5217 CRITICAL POC
9.2
CVE-2023-2017 HIGH POC
8.8
CVE-2023-29003 HIGH POC
8.8
CVE-2021-25631 HIGH POC
8.8
CVE-2018-6383 HIGH POC
8.8
CVE-2015-5946 HIGH POC
7.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2021-1255 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy