{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T11:04:40Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"cisco-sa-ucsi2-iptaclbp-L8Dzs8m8","slug":"cisco-sa-ucsi2-iptaclbp-l8dzs8m8","vendor":"Cisco","title":"Cisco Intersight Virtual Appliance IPv4 and IPv6 Forwarding Vulnerabilities","summary":"Multiple vulnerabilities in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent attacker to access sensitive internal services from an external interface. These vulnerabilities are due to insufficient restrictions for IPv4 or IPv6 packets that are received on the external management interface. An attacker could exploit these vulnerabilities by sending specific traffic to this interface on an affected device. A successful exploit could allow the attacker to access sensitive internal services and make configuration changes on the affected device.  Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsi2-iptaclbp-L8Dzs8m8","severity":"High","published_at":"2021-07-21T16:00:00Z","updated_at":"2021-07-21T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsi2-iptaclbp-L8Dzs8m8","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/cisco-sa-ucsi2-iptaclbp-L8Dzs8m8/csaf/cisco-sa-ucsi2-iptaclbp-L8Dzs8m8.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":2,"visible_product_count":1,"public_evidence_count":2,"kev_count":0,"highest_epss":0.00402},"cves":[{"id":"CVE-2021-1601","kev":false,"epss":{"score":0.00402,"percentile":0.32509,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:48Z"}},{"id":"CVE-2021-1600","kev":false,"epss":{"score":0.00402,"percentile":0.32508,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:48Z"}}],"public_evidence":[{"product":{"name":"Cisco Intersight Virtual Appliance","slug":"cisco-intersight-virtual-appliance","vendor":"Cisco"},"cve":{"id":"CVE-2021-1601"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:07:28Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Intersight Virtual Appliance","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00402,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:48Z"},"published_at":"2021-07-21T16:00:00Z","updated_at":"2021-07-21T16:00:00Z","advisory_updated_at":"2021-07-21T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsi2-iptaclbp-L8Dzs8m8","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsi2-iptaclbp-L8Dzs8m8"},"row_display_order":1},{"product":{"name":"Cisco Intersight Virtual Appliance","slug":"cisco-intersight-virtual-appliance","vendor":"Cisco"},"cve":{"id":"CVE-2021-1600"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:07:28Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Intersight Virtual Appliance","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00402,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:48Z"},"published_at":"2021-07-21T16:00:00Z","updated_at":"2021-07-21T16:00:00Z","advisory_updated_at":"2021-07-21T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsi2-iptaclbp-L8Dzs8m8","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsi2-iptaclbp-L8Dzs8m8"},"row_display_order":2}]}