CVE-2021-1560: medium-severity vulnerability in Cisco DNA Spaces Connector
Cisco DNA Spaces Connector Command Injection Vulnerabilities
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5epss 2.7%
Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, remote attacker to perform a command injection attack on an affected device. These vulnerabilities are due to insufficient input sanitization when executing affected commands. A high-privileged attacker could exploit these vulnerabilities on a Cisco DNA Spaces Connector by injecting crafted input during command execution. A successful exploit could allow the attacker to execute arbitrary commands as root within the Connector docker container.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Affected products
Cisco · Cisco DNA Spaces ConnectorRelated CVEs — Cisco DNA Spaces Connector
In the same product, most dangerous first.
CVE-2021-1559MEDIUMCisco DNA Spaces Connector Command Injection VulnerabilitiesEPSS 2.7%CVE-2020-3586CRITICALCisco DNA Spaces Connector Command Injection VulnerabilityEPSS 2.5%CVE-2021-1558MEDIUMCisco DNA Spaces Connector Privilege Escalation VulnerabilitiesEPSS 0.3%CVE-2021-1557MEDIUMCisco DNA Spaces Connector Privilege Escalation VulnerabilitiesEPSS 0.3%CVE-2025-20308MEDIUMCisco Spaces Connector Privilege Escalation VulnerabilityEPSS 0.2%