CVE-2021-1219CWE-798

Cisco Smart Software Manager Satellite Static Credential Vulnerability

High · published January 20, 2021

CVSS v3.0
7.8
EPSS
0%
Percentile
16.6
In the wild
Unconfirmed
What it is

A vulnerability in Cisco Smart Software Manager Satellite could allow an authenticated, local attacker to access sensitive information on an affected system. The vulnerability is due to insufficient protection of static credentials in the affected software. An attacker could exploit this vulnerability by gaining access to the static credential that is stored on the local device. A successful exploit could allow the attacker to view static credentials, which the attacker could use to carry out further attacks.

The record
Technical detail
CVSS v3.0
7.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00259 · 16.6th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2021-01-20T20:11Z
EPSS history
Timeline
  • 20 JAN 20:11Z
    Cisco Smart Software Manager Satellite Static Credential Vulnerability
    cvelistv5