Lucene search

K
cvelistCiscoCVELIST:CVE-2021-1557
HistoryMay 22, 2021 - 6:40 a.m.

CVE-2021-1557 Cisco DNA Spaces Connector Privilege Escalation Vulnerabilities

2021-05-2206:40:41
CWE-78
cisco
www.cve.org
4
cve-2021-1557
cisco dna spaces
privilege escalation

CVSS3

6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

AI Score

7.1

Confidence

High

EPSS

0

Percentile

5.2%

Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root. These vulnerabilities are due to insufficient restrictions during the execution of affected CLI commands. An attacker could exploit these vulnerabilities by leveraging the insufficient restrictions during execution of these commands. A successful exploit could allow the attacker to elevate privileges from dnasadmin and execute arbitrary commands on the underlying operating system as root.

CNA Affected

[
  {
    "product": "Cisco DNA Spaces Connector",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

CVSS3

6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

AI Score

7.1

Confidence

High

EPSS

0

Percentile

5.2%

Related for CVELIST:CVE-2021-1557