PT-2021-3722 · Cisco · Cisco Dna Center+1

Published 2021-06-17 · Updated 2025-07-23 · CVE-2021-1134

Positive Technologies (AI Summary)

CVSS v2.0

8.8

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Cisco DNA Center Software (affected versions not specified)

Description The issue is related to an incomplete validation of the X.509 certificate used when establishing a connection between DNA Center and an ISE server. This could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by supplying a crafted certificate, potentially intercepting communications between the ISE and DNA Center, and viewing or altering sensitive information about connected clients.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2021-03962

CVE-2021-1134

Affected Products

Cisco Dna Center

Ise Server

References · 9

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-certvalid-USEj2CZk · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-1134 · Security Note
• https://bdu.fstec.ru/vul/2021-03962 · Security Note
• https://osv.dev/vulnerability/CVE-2021-1134 · Vendor Advisory
• https://t.me/cveNotify/129992 · Telegram Post
• https://t.me/cvenotify/16794 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2021061706 · Note
• https://vuldb.com/?id.177712 · Note
• https://t.me/cibsecurity/25772 · Telegram Post