CVE-2021-34786CWE-620

Cisco BroadWorks CommPilot Application Software Vulnerabilities

Medium · published September 9, 2021

CVSS v3.1
6.5
EPSS
1%
Percentile
63.1
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01021 · 63.1th percentile
Weakness
CWE-620 · Unverified Password Change
Published
2021-09-09T05:01Z
EPSS history
Timeline
  • 09 SEP 05:01Z
    Cisco BroadWorks CommPilot Application Software Vulnerabilities
    cvelistv5