CVE-2021-1354

A vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager (UCSM). This vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to the registration API. A successful exploit could allow the attacker to register a rogue Cisco UCSM and gain access to Cisco UCS Central Software data and Cisco UCSM inventory data.

• CWE-295

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-invcert-eOpRvCKHVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-invcert-eOpRvCKHVendor Advisory

Published

Feb 4, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1348Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2021-1349A vulnerability in the web-based management interface of Cis…6.5
• CVE-2021-1350A vulnerability in the web UI of Cisco Umbrella could allow …5.3
• CVE-2021-1351A vulnerability in the web-based interface of Cisco Webex Me…6.1
• CVE-2021-1352A vulnerability in the DECnet Phase IV and DECnet/OSI protoc…6.5
• CVE-2021-1353A vulnerability in the IPv4 protocol handling of Cisco StarO…8.6
• CVE-2021-1355Multiple vulnerabilities in Cisco Unified Communications Man…6.5
• CVE-2021-1356Multiple vulnerabilities in the web UI of Cisco IOS XE Softw…4.3
• CVE-2021-1357Multiple vulnerabilities in Cisco Unified Communications Man…6.5
• CVE-2021-1358A vulnerability in the web-based management interface of Cis…6.1
• CVE-2021-1359A vulnerability in the configuration management of Cisco Asy…8.8
• CVE-2021-1360Multiple vulnerabilities in the web-based management interfa…7.2