CVE:CVE-2021-1580
CNNVD:CNNVD-202108-2308
Cisco Application Policy Infrastructure Controller（APIC）是美国思科（Cisco）公司的一款自动化的基础架构部署和治理解决方案。
Cisco Application Policy Infrastructure Controller 中存在命令注入漏洞，该漏洞源于产品的 web UI 和 API endpoint 未对输入数据做有效验证。攻击者可通过该漏洞执行系统命令。
solution:Upgrade cisco application_policy_infrastructure_controller to a higher version than 3.2\(10e\,4.2\(6h\,5.1\(3e\,and avoid the version (,3.2\(10e\)),[4.0,4.2\(6h\)),[5.0,5.1\(3e\)); Upgrade cisco cloud_application_policy_infrastructure_controller to a higher version than 3.2\(10e\,4.2\(6h\,5.1\(3e\,and avoid the version (,3.2\(10e\)),[4.0,4.2\(6h\)),[5.0,5.1\(3e\))