A vulnerability in the configuration archive functionality of Cisco DNA Center could allow any privilege-level authenticated, remote attacker to obtain the full unmasked running configuration of managed devices. The vulnerability is due to the configuration archives files being stored in clear text, which can be retrieved by various API calls. An attacker could exploit this vulnerability by authenticating to the device and executing a series of API calls. A successful exploit could allow the attacker to retrieve the full unmasked running configurations of managed devices.
History

Tue, 12 Nov 2024 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2021-01-20T19:57:22.414318Z

Updated: 2024-11-12T20:23:29.183Z

Reserved: 2020-11-13T00:00:00

Link: CVE-2021-1265

cve-icon Vulnrichment

Updated: 2024-08-03T16:02:56.372Z

cve-icon NVD

Status : Modified

Published: 2021-01-20T20:15:15.407

Modified: 2024-11-21T05:43:57.693

Link: CVE-2021-1265

cve-icon Redhat

No data.