CVE-2021-1538: medium-severity vulnerability in Cisco Common Services Platform Collector…
Cisco Common Services Platform Collector Command Injection Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.7epss 1.8%
A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector (CSPC) could allow an authenticated, remote attacker to execute arbitrary code. This vulnerability is due to insufficient sanitization of configuration entries. An attacker could exploit this vulnerability by logging in as a super admin and entering crafted input to configuration options on the CSPC configuration dashboard. A successful exploit could allow the attacker to execute remote code as root.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Affected products
Cisco · Cisco Common Services Platform Collector SoftwareRelated CVEs — Cisco Common Services Platform Collector…
In the same product, most dangerous first.
CVE-2019-1723CRITICALCisco Common Services Platform Collector Static Credential VulnerabilityEPSS 5.8%CVE-2021-40130MEDIUMCisco Common Services Platform Collector Improper Logging Restriction VulnerabilityEPSS 1.1%CVE-2021-40129MEDIUMCisco Common Services Platform Collector SQL Injection VulnerabilityEPSS 1.1%CVE-2021-34774MEDIUMCisco Common Services Platform Collector Information Disclosure VulnerabilityEPSS 1.0%CVE-2022-20674MEDIUMCisco Common Services Platform Collector Cross-Site Scripting VulnerabilitiesEPSS 0.8%CVE-2022-20673MEDIUMCisco Common Services Platform Collector Cross-Site Scripting VulnerabilitiesEPSS 0.8%