Lucene search

CiscoCVE-2021-34786

HistorySep 09, 2021 - 5:15 a.m.

CVE-2021-34786

2021-09-0905:15:12

CWE-620

CWE-287

cisco

web.nvd.nist.gov

cisco

broadworks

commpilot

application software

authenticated

remote attacker

delete

user accounts

elevated privileges

cve-2021-34786

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

34.4%

JSON

Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system.

Affected configurations

Nvd

Node

ciscobroadworks_commpilot_application_softwareRange22.0–22.0.2021.09

ciscobroadworks_commpilot_application_softwareRange23.0–23.0.2021.09

ciscobroadworks_commpilot_application_softwareRange24.0–24.0.2021.09

VendorProductVersionCPE
ciscobroadworks_commpilot_application_software*cpe:2.3:a:cisco:broadworks_commpilot_application_software:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	broadworks_commpilot_application_software	*	cpe:2.3:a:cisco:broadworks_commpilot_application_software::::::::

CNA Affected

[
  {
    "product": "Cisco BroadWorks",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-broadworks-dJ9JT67N

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

34.4%

JSON

Related for CVE-2021-34786