CVE-2021-34785
09.09.2021, 05:15
Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| cisco | broadworks_commpilot_application_software | 22.0 ≤ 𝑥 < 22.0.2021.09 |
| cisco | broadworks_commpilot_application_software | 23.0 ≤ 𝑥 < 23.0.2021.09 |
| cisco | broadworks_commpilot_application_software | 24.0 ≤ 𝑥 < 24.0.2021.09 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-620 - Unverified Password ChangeWhen setting a new password for a user, the product does not require knowledge of the original password, or using another form of authentication.
- CWE-287 - Improper AuthenticationWhen an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.