High severity8.8NVD Advisory· Published Jan 20, 2021· Updated Jun 17, 2026

CVE-2021-1248

Description

Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Data Center Network Manager3 versions
cpe:2.3:a:cisco:data_center_network_manager:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:cisco:data_center_network_manager:*:*:*:*:*:*:*:*range: <11.5\(1\)
- (no CPE)
- (no CPE)range: n/a

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-sql-inj-OAQOObPnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000