Lucene search
China National Vulnerability DatabaseCNVD-2021-101446HistoryNov 19, 2021 - 12:00 a.m.
Cisco Common Services Platform Collector SQL Injection Vulnerability
2021-11-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
0.001 Low
EPSS
Percentile
44.5%
Cisco Common Services Platform Collector (CSPC) is an SNMP-based tool that discovers and collects information from Cisco devices installed on the network. configuration of Cisco Common Services Platform Collector prior to version 2.9.1.1 The dashboard is vulnerable to SQL injection, which can be exploited by an attacker to read restricted information from the CSPC SQL database by uploading a file containing SQL queries to the configuration dashboard.
| CPE | Name | Operator | Version |
|---|---|---|---|
| Cisco Common Services Platform Collector <2. | eq | 9.1.1 |
Related
prion
prion
Input validation
2021-11-19 00:15:00
cve
cve
CVE-2021-40129
2021-11-19 00:15:07
nvd
nvd
CVE-2021-40129
2021-11-19 00:15:07
cvelist
cvelist
cisco
cisco
Cisco Common Services Platform Collector SQL Injection Vulnerability
2021-11-17 16:00:00