CVE-2021-42855: Riverbed Steelcentral Appinternals Dynamic Sampling Agent

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) uses the ".debug_command.config" file to store a json string that contains a list of IDs and pre-configured commands. The config file is subsequently used by the "/api/appInternals/1.0/agent/configuration" API to map the corresponding ID to a command to be executed.

Affected products

• Riverbed Steelcentral Appinternals Dynamic Sampling Agent: from 11.0.0, before 11.8.8 (fixed in 11.8.8); from 12.0.0, before 12.13.0 (fixed in 12.13.0); version 10.0.0 only

Published 2022-03-10. Last modified 2026-06-17.