Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Advisory: Cisco Smart Software Manager On-Prem — 20210120 Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerabilities Clear all filters
TI-2021-00865 CVE-2021-1138 · GHSA-j5h2-mqh2-gh66

Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerabilities

Priority MEDIUM 56

Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04436 Published 2021-01-20 No fix listed CWE-20
TI-2021-00866 CVE-2021-1139 · GHSA-x8m3-65hg-3375

Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerabilities

Priority MEDIUM 56

Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04012 Published 2021-01-20 No fix listed CWE-20
TI-2021-00867 CVE-2021-1140 · GHSA-fwqg-4g86-67jr

Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerabilities

Priority MEDIUM 56

Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04436 Published 2021-01-20 No fix listed CWE-20
TI-2021-00868 CVE-2021-1141 · GHSA-p4v2-w6qq-pp7v

Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerabilities

Priority MEDIUM 56

Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04012 Published 2021-01-20 No fix listed CWE-20
TI-2021-00869 CVE-2021-1142 · GHSA-93x6-3878-h24m

Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerabilities

Priority MEDIUM 56

Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04398 Published 2021-01-20 No fix listed CWE-20