CVE-2021-34786 Cisco BroadWorks CommPilot Application Software Vulnerabilities
Authenticated attackers can delete arbitrary user accounts or gain elevated privileges in Cisco BroadWorks CommPilot Application Software.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-34786?
CVE-2021-34786 is a medium-severity vulnerability in Cisco BroadWorks, published on 9 Sep 2021. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system.
Which versions are affected by CVE-2021-34786?
It affects 1 product.
Products include Cisco Broadworks Commpilot Application Software.
How do I fix CVE-2021-34786?
No fix has been published for CVE-2021-34786 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-34786 being exploited?
There is no known exploitation of CVE-2021-34786 in the wild and no public exploit code.
Other vulnerabilities in Cisco BroadWorks
Sources
Also known as GHSA-89qr-gmvh-jqf2.