CVE-2021-34748: falha de alta gravidade em Cisco Intersight Virtual Appliance
Cisco Intersight Virtual Appliance Command Injection Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.8epss 2.7%
A vulnerability in the web-based management interface of Cisco Intersight Virtual Appliance could allow an authenticated, remote attacker to perform a command injection attack on an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using the web-based management interface to execute a command using crafted input. A successful exploit could allow the attacker to execute arbitrary commands using root-level privileges on an affected device.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Cisco · Cisco Intersight Virtual ApplianceCVEs relacionadas — Cisco Intersight Virtual Appliance
No mesmo produto, das mais perigosas para as menos.
CVE-2021-1618MEDIUMCisco Intersight Virtual Appliance VulnerabilitiesEPSS 2.7%CVE-2021-1617MEDIUMCisco Intersight Virtual Appliance VulnerabilitiesEPSS 1.5%CVE-2023-20013MEDIUMCVE-2023-20013EPSS 1.0%CVE-2023-20017MEDIUMCVE-2023-20017EPSS 1.0%CVE-2021-1600HIGHCisco Intersight Virtual Appliance IPv4 and IPv6 Forwarding VulnerabilitiesEPSS 0.4%CVE-2021-1601HIGHCisco Intersight Virtual Appliance IPv4 and IPv6 Forwarding VulnerabilitiesEPSS 0.4%