Product:
Application Policy Infrastructure Controller
Summary
A vulnerability in the Object Model CLI component of Cisco Application Policy Infrastructure Controller could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service condition. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by issuing crafted commands at the CLI prompt.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-20107 |
Exploitation
To exploit this vulnerability, the attacker must have valid user credentials and any role that includes CLI access. By issuing specially crafted commands at the CLI prompt, the attacker can trigger a device reload, leading to a denial of service condition.
Affected Products
- Application Policy Infrastructure Controller: Vulnerable due to insufficient input validation in the Object Model CLI component.
Mitigation
To mitigate this vulnerability, ensure that only authorized users have CLI access and monitor for any unusual command activity. Regularly update the system to the latest version to incorporate security patches.