Description (CNA)
A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attacker to overwrite critical system files, which could cause a DoS condition. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to a race condition with handling system files. An attacker could exploit this vulnerability by doing specific operations on the file system. A successful exploit could allow the attacker to overwrite system files, which could lead to the device being in an inconsistent state and cause a DoS condition.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cisco / Cisco Application Policy Infrastructure Controller (APIC) | affected 3.2(8d); affected 3.2(1m); affected 3.2(5e); affected 4.1(2m); affected 3.2(41d); affected 3.2(3s); affected 4.0(3c); affected 4.1(1k); affected 3.2(4d); affected 4.2(2e); affected 4.2(3j); affected 4.2(3n); affected 4.0(1h); affected 4.1(1l); affected 3.2(9f); affected 4.2(3l); affected 4.2(2g); affected 3.2(7k); affected 3.2(9b); affected 3.2(3j); affected 4.1(2u); affected 4.2(1l); affected 4.1(1a); affected 4.0(3d); affected 3.2(4e); affected 4.1(1i); affected 3.2(5f); affected 3.2(1l); affected 4.2(1i); affected 4.1(2o); affected 4.2(1g); affected 4.1(2g); affected 4.2(2f); affected 3.2(6i); affected 3.2(3i); affected 3.2(3n); affected 4.1(2x); affected 3.2(5d); affected 4.2(3q); affected 4.1(1j); affected 4.1(2w); affected 3.2(2o); affected 3.2(3r); affected 4.0(2c); affected 4.1(2s); affected 3.2(7f); affected 3.2(3o); affected 3.2(2l); affected 4.2(1j); affected 4.2(4i); affected 3.2(9h); affected 5.0(1k); affected 4.2(4k); affected 5.0(1l); affected 5.0(2e); affected 4.2(4o); affected 4.2(4p); affected 5.0(2h); affected 4.2(5k); affected 4.2(5l); affected 4.2(5n); affected 5.1(1h); affected 4.2(6d); affected 5.1(2e); affected 4.2(6g); affected 4.2(6h); affected 5.1(3e); affected 3.2(10e); affected 4.2(6l); affected 4.2(7f); affected 5.1(4c); affected 4.2(6o); affected 5.2(1g); affected 5.2(2e); affected 4.2(7l); affected 3.2(10f); affected 5.2(2f); affected 5.2(2g); affected 4.2(7q); affected 5.2(2h); affected 5.2(3f); affected 5.2(3e); affected 5.2(3g); affected 4.2(7r); affected 4.2(7s); affected 5.2(4d); affected 5.2(4e); affected 4.2(7t); affected 5.2(5d); affected 3.2(10g); affected 5.2(5c); affected 6.0(1g); affected 4.2(7u); affected 5.2(5e); affected 5.2(4f); affected 5.2(6e); affected 6.0(1j); affected 5.2(6g); affected 5.2(7f); affected 4.2(7v); affected 5.2(7g); affected 6.0(2h); affected 4.2(7w); affected 5.2(6h); affected 5.2(4h); affected 5.2(8d); affected 6.0(2j); affected 5.2(8e); affected 6.0(3d); affected 6.0(3e); affected 5.2(8f); affected 5.2(8g); affected 5.3(1d); affected 5.2(8h); affected 6.0(4c); affected 5.3(2a); affected 5.2(8i); affected 6.0(5h); affected 5.3(2b); affected 6.0(3g); affected 6.0(5j); affected 5.3(2c); affected 6.0(6c); affected 6.1(1f); affected 6.0(7e); affected 5.3(2d); affected 6.0(8d); affected 5.3(2e) |
CWE
CWE-362
References
ADP enrichment
No English description supplied.
No references supplied.