Cisco Elastic Services Controller vulnerabilities
2 vulnerabilities
Known vulnerabilities in Cisco Elastic Services Controller, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-1312ciscocisco elastic services controller+1
EPSS score2.56%
A vulnerability in the system resource management of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) to the health monitor API on an affected device. The vulnerability is due to inadequate provisioning of kernel parameters for the maximum number of TCP connections and SYN backlog. An attacker could exploit this vulnerability by sending a flood of crafted TCP packets to an affected device. A successful exploit could allow the attacker to block TCP listening ports that are used by the health monitor API. This vulnerability only affects customers who use the health monitor API.CVE-2019-1867ciscocisco elastic services controller+1EPSS score30.34%
A vulnerability in the REST API of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to bypass authentication on the REST API. The vulnerability is due to improper validation of API requests. An attacker could exploit this vulnerability by sending a crafted request to the REST API. A successful exploit could allow the attacker to execute arbitrary actions through the REST API with administrative privileges on an affected system.