CVE-2021-1303

CVE-2021-1303 concerns Cisco DNA Center. A vulnerability in the user management roles enforcement allows an authenticated attacker with an Observer role to execute commands on managed devices, potentially viewing diagnostic information. Several sources state this is an elevation of privilege in t...

CVE-2021-1303 Cisco DNA Center Privilege Escalation Vulnerability

A vulnerability in the user management roles of Cisco DNA Center could allow an authenticated, remote attacker to execute unauthorized commands on an affected device. The vulnerability is due to improper enforcement of actions for assigned user roles. An attacker could exploit this vulnerability ...

CVE-2021-1303 Cisco DNA Center Privilege Escalation Vulnerability

A vulnerability in the user management roles of Cisco DNA Center could allow an authenticated, remote attacker to execute unauthorized commands on an affected device. The vulnerability is due to improper enforcement of actions for assigned user roles. An attacker could exploit this vulnerability ...

CVE-2021-1257

A vulnerability in the web-based management interface of Cisco DNA Center Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to manipulate an authenticated user into executing malicious actions without their awareness or consent. The...

Cisco DNA Center Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco DNA Center Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to manipulate an authenticated user into executing malicious actions without their awareness or consent. The...

Cisco DNA Center Information Disclosure Vulnerability

A vulnerability in the configuration archive functionality of Cisco DNA Center could allow any privilege-level authenticated, remote attacker to obtain the full unmasked running configuration of managed devices. The vulnerability is due to the configuration archives files being stored in clear...

Cisco DNA Center Command Runner Command Injection Vulnerability

A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient input validation by the Command Runner tool. An attacker could exploit this vulnerability by providing craft...

Cisco DNA Center Privilege Escalation Vulnerability

A vulnerability in the user management roles of Cisco DNA Center could allow an authenticated, remote attacker to execute unauthorized commands on an affected device. The vulnerability is due to improper enforcement of actions for assigned user roles. An attacker could exploit this vulnerability ...

PT-2021-1811 · Cisco · Cisco Dna Center

Name of the Vulnerable Software and Affected Versions: Cisco DNA Center affected versions not specified Description: The issue is related to the configuration archive functionality, where confidential information is stored unencrypted. This could allow a remote attacker to gain unauthorized acces...

Cisco DNA Center 安全漏洞

Cisco DNA Center is the network management and command center for Cisco DNA. An information disclosure vulnerability exists in the Configuration Archiving feature in Cisco DNA Center versions prior to 2.1.2.0. The vulnerability stems from the fact that configuration archive files are stored in...

PT-2021-1872 · Cisco · Cisco Dna Center

Name of the Vulnerable Software and Affected Versions: Cisco DNA Center Software affected versions not specified Description: A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack, manipulating an...

Cisco DNA Center 安全漏洞

Cisco DNA Center is the network management and command center for Cisco DNA. An elevation of privilege vulnerability exists in the user management role in Cisco DNA Center versions prior to 2.1.2.0. The vulnerability stems from improper execution of an action on a specified user role. An attacker...

PT-2021-1923 · Cisco · Cisco Dna Center

Name of the Vulnerable Software and Affected Versions: Cisco DNA Center affected versions not specified Description: A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated, remote attacker to perform a command injection attack. The issue is due to insufficient...

Cisco DNA Center Software 跨站请求伪造漏洞

Cisco DNA Center is the network management and command center for Cisco DNA. A cross-site request forgery vulnerability exists in the web management interface of Cisco DNA Center versions prior to 2.1.2.0. An attacker could exploit this vulnerability by tricking a user into visiting a specially...

PT-2021-1839 · Cisco · Cisco Dna Center

Name of the Vulnerable Software and Affected Versions: Cisco DNA Center affected versions not specified Description: The issue is related to improper enforcement of actions for assigned user roles in the user management service. This could allow a remote attacker to execute unauthorized commands ...

Cisco DNA Center 操作系统命令注入漏洞

Cisco DNA Center is the network management and command center for Cisco DNA. A command injection vulnerability exists in the Command Runner tool in Cisco DNA Center versions prior to 1.3.1.0. The vulnerability stems from insufficient input validation of the Command Runner tool. An attacker could...

UK Police mistakenly deleted 150,000 arrest records in software glitch

By Waqas Reportedly, a software glitch wiped DNA and fingerprint data from the police computer. This is a post from HackRead.com Read the original post: UK Police mistakenly deleted 150,000 arrest records in software glitch...

Cisco DNA Center Cross-Site Scripting Vulnerability (CNVD-2021-03567)

Cisco DNA Center is the network management and command center for Cisco DNA. A cross-site scripting vulnerability exists in the Web management interface of Cisco DNA Center versions prior to 2.2.1.0. The vulnerability stems from the Web management interface not properly validating user-supplied...

CVE-2021-1130

A vulnerability in the web-based management interface of Cisco DNA Center software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability exists because the web-based management interface...

CVE-2021-1130

A vulnerability in the web-based management interface of Cisco DNA Center software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability exists because the web-based management interface...