Cisco Dna Spaces: Connector vulnerabilities

9 CVEs affecting Cisco Dna Spaces: Connector, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-44228, published 2021-12-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-44228: Apache Log4j2 Remote Code Execution Vulnerability, published 2021-12-10. Critical severity, CVSS 10.0. Actively exploited: in CISA KEV since 2021-12-10. EPSS: 100% chance of exploitation in the next 30 days. Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker…
CVE-2021-1560, published 2021-05-22. High severity, CVSS 7.2. EPSS: 2.7% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, remote attacker to perform a command injection attack on an affected device. These vulnerabilities are due to…
CVE-2021-1559, published 2021-05-22. High severity, CVSS 7.2. EPSS: 2.7% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, remote attacker to perform a command injection attack on an affected device. These vulnerabilities are due to…
CVE-2020-3586, published 2020-11-18. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco DNA Spaces Connector could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The…
CVE-2019-15995, published 2019-11-26. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in the web UI of Cisco DNA Spaces: Connector could allow an authenticated, remote attacker to execute arbitrary SQL queries. The vulnerability exists because the web UI does not…
CVE-2019-15997, published 2019-11-26. Medium severity, CVSS 6.7. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to perform a command injection attack and execute arbitrary commands on the underlying operating system as…
CVE-2019-15996, published 2019-11-26. Medium severity, CVSS 6.7. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root. The…
CVE-2021-1558, published 2021-05-22. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root.…
CVE-2021-1557, published 2021-05-22. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root.…