CVE:CVE-2021-1577
CNNVD:CNNVD-202108-2357
Cisco Application Policy Infrastructure Controller（APIC）是美国思科（Cisco）公司的一款自动化的基础架构部署和治理解决方案。
Cisco Application Policy Infrastructure Controller 存在安全漏洞，该漏洞源于访问控制不当造成的。攻击者可以通过使用特定 API 端点将文件上传到受影响的设备来利用此漏洞。成功的利用可能允许攻击者在受影响的设备上读取或写入任意文件。
solution:Upgrade cisco application_policy_infrastructure_controller to a higher version than 3.2\(10e\,4.2\(6h\,5.1\(3e\,and avoid the version (,3.2\(10e\)),[4.0,4.2\(6h\)),[5.0,5.1\(3e\)); Upgrade cisco cloud_application_policy_infrastructure_controller to a higher version than 3.2\(10e\,4.2\(6h\,5.1\(3e\,and avoid the version (,3.2\(10e\)),[4.0,4.2\(6h\)),[5.0,5.1\(3e\))