VDB
CVE-2021-1558
CVE-2021-1558
PUBLISHED
CVSS 6 MEDIUM
Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root. These vulnerabilities are due to insufficient restrictions during the execution of affected CLI commands. An attacker could exploit these vulnerabilities by leveraging the insufficient restrictions during execution of these commands. A successful exploit could allow the attacker to elevate privileges from dnasadmin and execute arbitrary commands on the underlying operating system as root.
EPSS 0.33% · 24.9th percentile
Risk Scores
CVSS 3.1
6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.33%
24.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | dna_spaces\ | _connector |
| Cisco | Cisco DNA Spaces Connector | n/a |
Timeline
- May 22, 2021 EPSS Score
- May 22, 2021 CVE Published
- Jul 25, 2021 EPSS Score
- Sep 24, 2021 EPSS Score
- Nov 25, 2021 EPSS Score
- Jan 25, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 28, 2022 EPSS Score
- Jul 30, 2022 EPSS Score
- Sep 29, 2022 EPSS Score