Lucene search

K
cvelistCiscoCVELIST:CVE-2021-34786
HistorySep 09, 2021 - 5:01 a.m.

CVE-2021-34786 Cisco BroadWorks CommPilot Application Software Vulnerabilities

2021-09-0905:01:49
CWE-620
cisco
www.cve.org
2
cisco broadworks
commpilot
application
vulnerabilities
remote attacker
elevated privileges
user accounts

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

34.4%

Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system.

CNA Affected

[
  {
    "product": "Cisco BroadWorks",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

34.4%

Related for CVELIST:CVE-2021-34786