Cisco Packet Tracer vulnerabilities

3 CVEs affecting Cisco Packet Tracer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-1593, published 2021-08-04.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2010-3135, published 2010-08-26. High severity, CVSS 9.3. EPSS: 8.2% chance of exploitation in the next 30 days. Untrusted search path vulnerability in Cisco Packet Tracer 5.2 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse…
• CVE-2017-12313, published 2017-11-16. Medium severity, CVSS 6.7. EPSS: 0.5% chance of exploitation in the next 30 days. An untrusted search path (aka DLL Preload) vulnerability in the Cisco Network Academy Packet Tracer software could allow an authenticated, local attacker to execute arbitrary code via DLL hijacking…
• CVE-2021-1593, published 2021-08-04. High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in Cisco Packet Tracer for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this vulnerability, the attacker…