PT-2021-1811 · Cisco · Cisco Dna Center

Prabudas Varadarajan · Published 2021-01-20 · Updated 2025-07-23 · CVE-2021-1265

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Cisco DNA Center (affected versions not specified)

Description: The issue is related to the configuration archive functionality, where confidential information is stored unencrypted. This could allow a remote attacker to gain unauthorized access to protected information. The vulnerability is due to configuration archive files being stored in clear text, which can be retrieved by various API calls. An attacker could exploit this by authenticating to the device and executing a series of API calls, potentially retrieving the full unmasked running configurations of managed devices.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

BDU:2021-00566

CVE-2021-1265

Affected Products

Cisco Dna Center

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnacid-OfeeRjcn · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00566 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-1265 · Security Note
• https://osv.dev/vulnerability/CVE-2021-1265 · Vendor Advisory
• https://t.me/cveNotify/129990 · Telegram Post