CVE-2021-36307CWE-269

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability

High · published November 20, 2021

CVSS v3.1
8.8
EPSS
1%
Percentile
59.4
In the wild
Unconfirmed
What it is

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. A malicious low privileged user with specific access to the API could potentially exploit this vulnerability to gain admin privileges on the affected system.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00904 · 59.4th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2021-11-20T01:40Z
EPSS history
Timeline
  • 20 NOV 01:40Z
    Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability
    cvelistv5