CVE-2021-1583 Details
Description
A vulnerability in the fabric infrastructure file system access control of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated, local attacker to read arbitrary files on an affected system. This vulnerability is due to improper access control. An attacker with Administrator privileges could exploit this vulnerability by executing a specific vulnerable command on an affected device. A successful exploit could allow the attacker to read arbitrary files on the file system of the affected device.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Nov 7, 2024References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-naci-afr-UtjfO2D7 | CVE | PatchVendor Advisory |
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-naci-afr-UtjfO2D7 | [email protected] | PatchVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-Other | Weakness Not in a Standard CWE Category | [email protected] |
| CWE-284 | Improper Access Control | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| cisco nx-os | 14.2(7f) |
CPE
Remediation
| |
| cisco nexus 9000 | All versions |
CPE
Remediation
| |
| cisco nexus 9000v | All versions |
CPE
Remediation
| |
| cisco nexus 92160yc-x | All versions |
CPE
Remediation
| |
| cisco nexus 92300yc | All versions |
CPE
Remediation
| |
| cisco nexus 92304qc | All versions |
CPE
Remediation
| |
| cisco nexus 92348gc-x | All versions |
CPE
Remediation
| |
| cisco nexus 9236c | All versions |
CPE
Remediation
| |
| cisco nexus 9272q | All versions |
CPE
Remediation
| |
| cisco nexus 93108tc-ex | All versions |
CPE
Remediation
| |
| cisco nexus 93108tc-ex-24 | All versions |
CPE
Remediation
| |
| cisco nexus 93108tc-fx | All versions |
CPE
Remediation
| |
| cisco nexus 93108tc-fx-24 | All versions |
CPE
Remediation
| |
| cisco nexus 93108tc-fx3p | All versions |
CPE
Remediation
| |
| cisco nexus 93120tx | All versions |
CPE
Remediation
| |
| cisco nexus 93128tx | All versions |
CPE
Remediation
| |
| cisco nexus 9316d-gx | All versions |
CPE
Remediation
| |
| cisco nexus 93180lc-ex | All versions |
CPE
Remediation
| |
| cisco nexus 93180yc-ex | All versions |
CPE
Remediation
| |
| cisco nexus 93180yc-ex-24 | All versions |
CPE
Remediation
| |
| cisco nexus 93180yc-fx | All versions |
CPE
Remediation
| |
| cisco nexus 93180yc-fx-24 | All versions |
CPE
Remediation
| |
| cisco nexus 93180yc-fx3 | All versions |
CPE
Remediation
| |
| cisco nexus 93180yc-fx3s | All versions |
CPE
Remediation
| |
| cisco nexus 93216tc-fx2 | All versions |
CPE
Remediation
| |
| cisco nexus 93240yc-fx2 | All versions |
CPE
Remediation
| |
| cisco nexus 9332c | All versions |
CPE
Remediation
| |
| cisco nexus 9332pq | All versions |
CPE
Remediation
| |
| cisco nexus 93360yc-fx2 | All versions |
CPE
Remediation
| |
| cisco nexus 9336c-fx2 | All versions |
CPE
Remediation
| |
| cisco nexus 9336c-fx2-e | All versions |
CPE
Remediation
| |
| cisco nexus 9348gc-fxp | All versions |
CPE
Remediation
| |
| cisco nexus 93600cd-gx | All versions |
CPE
Remediation
| |
| cisco nexus 9364c | All versions |
CPE
Remediation
| |
| cisco nexus 9364c-gx | All versions |
CPE
Remediation
| |
| cisco nexus 9372px | All versions |
CPE
Remediation
| |
| cisco nexus 9372px-e | All versions |
CPE
Remediation
| |
| cisco nexus 9372tx | All versions |
CPE
Remediation
| |
| cisco nexus 9372tx-e | All versions |
CPE
Remediation
| |
| cisco nexus 9396px | All versions |
CPE
Remediation
| |
| cisco nexus 9396tx | All versions |
CPE
Remediation
| |
| cisco nexus 9508 | All versions |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Nov 7, 2023 | CVE Modified | [email protected] |
| Oct 21, 2022 | Reanalysis | [email protected] |
| Sep 2, 2021 | Initial Analysis | [email protected] |