A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the NX-API on an affected device. An attacker could exploit this vulnerability by persuading a user of the NX-API to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user. The attacker could view and modify the device configuration. Note: The NX-API feature is disabled by default.
Metrics
Affected Vendors & Products
References
History
Sat, 09 Nov 2024 00:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: cisco
Published: 2021-02-24T19:30:15.985802Z
Updated: 2024-11-08T23:40:13.499Z
Reserved: 2020-11-13T00:00:00
Link: CVE-2021-1227
Vulnrichment
Updated: 2024-08-03T16:02:56.336Z
NVD
Status : Modified
Published: 2021-02-24T20:15:12.410
Modified: 2024-11-21T05:43:52.533
Link: CVE-2021-1227
Redhat
No data.