CVE-2021-42857: Riverbed Steelcentral Appinternals Dynamic Sampling Agent

Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days.

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDaServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/da/pcf" API. The affected endpoint does not have any validation of the user's input that allows a malicious payload to be injected.

Affected products

• Riverbed Steelcentral Appinternals Dynamic Sampling Agent: from 11.0.0, before 11.8.8 (fixed in 11.8.8); from 12.0.0, before 12.13.0 (fixed in 12.13.0); version 10.0.0 only

Published 2022-03-10. Last modified 2026-06-17.