CVE-2021-1583

MEDIUM

Cisco NX-OS - Authenticated Arbitrary File Read via Fabric Infrastructure Command

Title source: llm
STIX 2.1

Description

A vulnerability in the fabric infrastructure file system access control of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated, local attacker to read arbitrary files on an affected system. This vulnerability is due to improper access control. An attacker with Administrator privileges could exploit this vulnerability by executing a specific vulnerable command on an affected device. A successful exploit could allow the attacker to read arbitrary files on the file system of the affected device.

References (1)

Core 1
Core References

Scores

CVSS v3 4.4
EPSS 0.0016
EPSS Percentile 36.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-284
Status published
Products (1)
cisco/nx-os 14.2\(7f\)
Published Aug 25, 2021
Tracked Since Feb 18, 2026