Critical severity9.8NVD Advisory· Published Feb 24, 2021· Updated Jun 17, 2026

CVE-2021-1396

Description

Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create diagnostic files, and make limited configuration changes. For more information about these vulnerabilities, see the Details section of this advisory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Application Policy Infrastructure Controller2 versions
cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1.3:c:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1.3:c:*:*:*:*:*:*
- cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1.3:d:*:*:*:*:*:*
Cisco Systems, Inc./Application Services Engine
cpe:2.3:a:cisco:application_services_engine:*:*:*:*:*:*:*:*
Range: >=1.1,<1.1\(3e\)
Cisco Systems, Inc./Application Services Engine Softwarellm-fuzzy
Cisco Systems, Inc./Application Control Engine Softwarecpe-rescue
Range: n/a

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-case-mvuln-dYrDPC6wnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000