CVE-2021-1134: Cisco DNA Center Certificate Validation Vulnerability

Severity: high (CVSS 7.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-06-29 · updated 2026-06-17
Weakness: CWE-295

Description

A vulnerability in the Cisco Identity Services Engine (ISE) integration feature of the Cisco DNA Center Software could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to an incomplete validation of the X.509 certificate used when establishing a connection between DNA Center and an ISE server. An attacker could exploit this vulnerability by supplying a crafted certificate and could then intercept communications between the ISE and DNA Center. A successful exploit could allow the attacker to view and alter sensitive information that the ISE maintains about clients that are connected to the network.

Affected products

Cisco Digital Network Architecture Center (DNA Center): before 2.2.2.1 — fixed in 2.2.2.1

How to fix

Upgrade to a fixed version: Cisco Digital Network Architecture Center (DNA Center) 2.2.2.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-1134 or the next vulnerability affects your stack