关键信息 漏洞描述 标题: Cisco Application Services Engine Unauthorized Access Vulnerabilities 严重性: Critical CVSS 评分: 9.8 影响产品 受影响版本: Cisco Application Services Engine Software releases 1.1(3d) and earlier. 未受影响版本: Only products listed in the Vulnerable Products section of this advisory are known to be affected by these vulnerabilities. 漏洞详情 CVE-2021-1393: Unauthorized Service Access Vulnerability - Bug ID: CSCvw14124 - CVSS Base Score: 9.8 - CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-1396: Unauthorized API Access Vulnerability - Bug ID: CSCvw55819 - CVSS Base Score: 6.5 - CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 解决方案 修复版本: - Cisco Application Services Engine Software Release 1.1(3e) 是针对这些漏洞的第一个修复版本。 - 2.0 版本不受影响。 其他信息 是否已公开: Cisco Product Security Incident Response Team (PSIRT) 已知没有关于这些漏洞的公开公告或恶意使用情况。 来源: 这些漏洞是在内部安全测试中发现的。 公告链接: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-case-mvuln-dYrDPC6w