Paper/Archive/CVE-2021-1139

CVE-2021-1139

Cisco Cisco Smart Software Manager On-Prem — Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerabilities

EPSS 4%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 90.6.906 × 2018.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this advisory.

Affected

ProductAffectedFixed inSource

Cisco Smart Software Manager On-Premn/a–CNA

Scores by source

cisco (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorytools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-multici-pgG5WM5A