CVEvulnerability

CVE-2021-34786

4.9 MEDIUM Published 2021-09-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-09-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS 3.1 ([email protected])
4.9 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Weaknesses
CWE-287, CWE-620

Description

Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system.

Affected configurations

• cisco broadworks commpilot application software (>= 22.0 < 22.0.2021.09) • cisco broadworks commpilot application software (>= 23.0 < 23.0.2021.09) • cisco broadworks commpilot application software (>= 24.0 < 24.0.2021.09)

Related

Weakness · CWE (2)

  • CWE-287 Improper Authentication weakness
  • CWE-620 Unverified Password Change weakness

References