Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerabilities
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-multici-pgG5WM5A ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-multici-pgG5WM5A"]
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-1142US | critical9.8 | — | ||
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying ope… | ||||
| CVE-2021-1141US | high8.8 | — | ||
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying ope… | ||||
| CVE-2021-1140US | critical9.8 | — | ||
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying ope… | ||||
| CVE-2021-1139US | high8.8 | — | ||
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying ope… | ||||
| CVE-2021-1138US | critical9.8 | — | ||
Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying ope… | ||||
references
External citations — patches, advisories, analysis.
- CSCvm42428external
- CSCvm42436external
- CSCvm42548external
- CSCvm42748external
- CSCvm45213external
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-multici-pgG5WM5Aexternal
- Security Vulnerability Policyexternal
- considering software upgradesexternal
remediations (5)
- FixedCisco Smart Software Manager On-Prem
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Smart Software Manager On-Prem
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Smart Software Manager On-Prem
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Smart Software Manager On-Prem
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Smart Software Manager On-Prem
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan