CVE-2021-1138

—

CVSS 3.1

9.8 critical

EPSS

4%p91

Published

Jan 20, 2021 (Jan 20, 2021)

Modified

Jun 17, 2026

Description

Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this advisory.

Vendors: cisco
Products: smart software manager satellite
Weakness: CWE-20, CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.4%)

In the news1 stories

Cisco fixed multiple flaws in Cisco SD-WAN products and Smart Software Manager Satellite Web UI

Security AffairsJan 21, 08:43 UTC · Jan 21, 2021Vulnerability CVE-2021-1300 CVE-2021-1301 CVE-2021-1138+2 CVEs