CVE-2021-1538: fallo de gravedad media en Cisco Common Services Platform Collector…
Cisco Common Services Platform Collector Command Injection Vulnerability
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.7epss 1.8%
A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector (CSPC) could allow an authenticated, remote attacker to execute arbitrary code. This vulnerability is due to insufficient sanitization of configuration entries. An attacker could exploit this vulnerability by logging in as a super admin and entering crafted input to configuration options on the CSPC configuration dashboard. A successful exploit could allow the attacker to execute remote code as root.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Productos afectados
Cisco · Cisco Common Services Platform Collector SoftwareCVEs relacionadas — Cisco Common Services Platform Collector…
En el mismo producto, de las más peligrosas a las menos.
CVE-2019-1723CRITICALCisco Common Services Platform Collector Static Credential VulnerabilityEPSS 5.8%CVE-2021-40130MEDIUMCisco Common Services Platform Collector Improper Logging Restriction VulnerabilityEPSS 1.1%CVE-2021-40129MEDIUMCisco Common Services Platform Collector SQL Injection VulnerabilityEPSS 1.1%CVE-2021-34774MEDIUMCisco Common Services Platform Collector Information Disclosure VulnerabilityEPSS 1.0%CVE-2022-20674MEDIUMCisco Common Services Platform Collector Cross-Site Scripting VulnerabilitiesEPSS 0.8%CVE-2022-20673MEDIUMCisco Common Services Platform Collector Cross-Site Scripting VulnerabilitiesEPSS 0.8%