Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this advisory.
References
| Link | Resource |
|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-multici-pgG5WM5A | Vendor Advisory |
Configurations
History
05 Aug 2022, 18:28
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-78 |
29 Jan 2021, 16:10
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 10.0
v3 : 9.8 |
| References | (CISCO) https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-multici-pgG5WM5A - Vendor Advisory | |
| CWE | CWE-77 | |
| CPE | cpe:2.3:a:cisco:smart_software_manager_satellite:*:*:*:*:*:*:*:* |
26 Jan 2021, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this advisory. |
20 Jan 2021, 21:31
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-01-20 21:15
Updated : 2022-08-05 18:28
NVD link : CVE-2021-1142
Mitre link : CVE-2021-1142
JSON object : View
Products Affected
cisco
- smart_software_manager_satellite
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')