Firewall Misconfiguration in Cisco Application Policy Infrastructure Controller

CVE-2017-12262

Summary

The vulnerability arises from incorrect firewall rules within the Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM). An unauthenticated attacker on the same network can exploit this weakness to gain unauthorized access to internal services, usually protected from external traffic. By sending crafted packets to the device's public interface, the attacker can redirect traffic to the internal virtual network, thereby accessing elevated privileges on sensitive services. This misconfiguration can significantly compromise network security, making timely patching or upgrading to version 1.5 or later essential for safeguarding against potential exploitation.

References