CVE-2021-1583

Estado: ModificadaMedia (4.4)—
A vulnerability in the fabric infrastructure file system access control of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated, local attacker to read arbitrary files on an affected system. This vulnerability is due to improper access control. An attacker with Administrator privileges could exploit this vulnerability by executing a specific vulnerable command on an affected device. A successful exploit could allow the attacker to read arbitrary files on the file system of the affected device.
CVSS

Versión: 3.1
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Puntuación base: 4.4
Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 0.22%
Percentil entre todas las CVEs puntuadas: 12
Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)

Cisco — Nx-os
CWE

CWE-284
NVD-CWE-Other
Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-1583",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2021-1583",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-11-07T21:40:54.721873Z"
        }
      }
    ],
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@cisco.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.4,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 0.8
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.4,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "Cisco",
          "product": "Cisco NX-OS System Software in ACI Mode",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-08-25T20:15:10.997",
  "references": [
    {
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-naci-afr-UtjfO2D7",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-naci-afr-UtjfO2D7",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@cisco.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the fabric infrastructure file system access control of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated, local attacker to read arbitrary files on an affected system. This vulnerability is due to improper access control. An attacker with Administrator privileges could exploit this vulnerability by executing a specific vulnerable command on an affected device. A successful exploit could allow the attacker to read arbitrary files on the file system of the affected device."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en el control de acceso al sistema de archivos de la infraestructura de fábrica de Cisco Nexus 9000 Series Fabric Switches en el modo Application Centric Infrastructure (ACI) podría permitir a un atacante local autenticado leer archivos arbitrarios en un sistema afectado. Esta vulnerabilidad es debido a un control de acceso inapropiado. Un atacante con privilegios de Administrador podría explotar esta vulnerabilidad al ejecutar un comando vulnerable específico en un dispositivo afectado. Una explotación con éxito podría permitir al atacante leer archivos arbitrarios en el sistema de archivos del dispositivo afectado."
    }
  ],
  "lastModified": "2026-06-17T03:32:06.327",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:nx-os:14.2\\(7f\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD6D7D62-660F-49AB-96D7-189778A42394"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8EBEBA5B-5589-417B-BF3B-976083E9FE54"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9000v:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0CD9C1F1-8582-4F67-A77D-97CBFECB88B8"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_92160yc-x:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4283E433-7F8C-4410-B565-471415445811"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_92300yc:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F80AB6FB-32FD-43D7-A9F1-80FA47696210"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_92304qc:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D5B2E4C1-2627-4B9D-8E92-4B483F647651"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_92348gc-x:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "557ED31C-C26A-4FAE-8B14-D06B49F7F08B"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9236c:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "11411BFD-3F4D-4309-AB35-A3629A360FB0"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9272q:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E663DE91-C86D-48DC-B771-FA72A8DF7A7C"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93108tc-ex:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A90184B3-C82F-4CE5-B2AD-97D5E4690871"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93108tc-ex-24:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "40E40F42-632A-47DF-BE33-DC25B826310B"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93108tc-fx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4AB89849-6DA4-4C9D-BC3F-EE0E41FD1901"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93108tc-fx-24:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C47F6BF9-2ADB-41A4-8D7D-8BB00141BB23"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93108tc-fx3p:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BBEF7F26-BB47-44BD-872E-130820557C23"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "07DE6F63-2C7D-415B-8C34-01EC05C062F3"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93128tx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F423E45D-A6DD-4305-9C6A-EAB26293E53A"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9316d-gx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "102F91CD-DFB6-43D4-AE5B-DA157A696230"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93180lc-ex:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E952A96A-0F48-4357-B7DD-1127D8827650"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93180yc-ex:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F70D81F1-8B12-4474-9060-B4934D8A3873"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93180yc-ex-24:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5394DE31-3863-4CA9-B7B1-E5227183100D"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93180yc-fx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7349D69B-D8FA-4462-AA28-69DD18A652D9"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93180yc-fx-24:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "FE4BB834-2C00-4384-A78E-AF3BCDDC58AF"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93180yc-fx3:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B0D30D52-837F-4FDA-B8E5-A9066E9C6D2F"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93180yc-fx3s:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7CE49B45-F2E9-491D-9C29-1B46E9CE14E2"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93216tc-fx2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B1CC5F78-E88B-4B82-9E3E-C73D3A49DE26"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93240yc-fx2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "91231DC6-2773-4238-8C14-A346F213B5E5"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9332c:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2DF88547-BAF4-47B0-9F60-80A30297FCEB"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9332pq:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "113772B6-E9D2-4094-9468-3F4E1A87D07D"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93360yc-fx2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C45A38D6-BED6-4FEF-AD87-A1E813695DE0"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9336c-fx2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F1FC2B1F-232E-4754-8076-CC82F3648730"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9336c-fx2-e:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7CDD27C9-5EAF-4956-8AB7-740C84C9D4FC"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9348gc-fxp:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "17C7E3DB-8E1A-47AD-B1C5-61747DC0CFB9"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93600cd-gx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2CF467E2-4567-426E-8F48-39669E0F514C"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9364c:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "63842B25-8C32-4988-BBBD-61E9CB09B4F3"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9364c-gx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "68EA1FEF-B6B6-49FE-A0A4-5387F76303F8"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9372px:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4364ADB9-8162-451D-806A-B98924E6B2CF"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9372px-e:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B53BCB42-ED61-4FCF-8068-CB467631C63C"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9372tx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "49E0371B-FDE2-473C-AA59-47E1269D050F"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9372tx-e:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "489D11EC-5A18-4F32-BC7C-AC1FCEC27222"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9396px:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1BC5293E-F2B4-46DC-85DA-167EA323FCFD"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9396tx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EA022E77-6557-4A33-9A3A-D028E2DB669A"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9508:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DDC2F709-AFBE-48EA-A3A2-DA1134534FB6"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}