Cisco Application Policy Infrastructure Controller Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Object Model CLI component of Cisco Application Policy Infrastructure Controller (APIC). This issue allows an authenticated, local attacker with CLI access to cause the device to reload unexpectedly, leading to a DoS condition. The vulnerability arises from insufficient input validation, enabling attackers to issue crafted commands that trigger the device reload.

Impact

Exploitation of this vulnerability causes the device to reload, creating a denial-of-service condition.

Remediation

Cisco has released software updates to address this vulnerability. Users should upgrade to version 6.1(4h) if they are on the 6.1 release. For those on releases 6.0 and earlier or 6.2, this vulnerability is not applicable.