Dna Spaces: Connector
Approved changes feed: RSS · Atom
cpe:2.3:a:cisco:dna_spaces\:_connector:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Dna Spaces: Connector (73bb42a5-139d-528d-aacc-8db2f20fd4a8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-44228 |
vulnerable | 2026-06-08 05:36:45.299050 |
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.
Published: 2021-12-10T00:00:00.000Z
Updated: 2025-10-21T23:25:23.121Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-1560 |
vulnerable | 2026-06-08 05:28:15.015105 |
Cisco DNA Spaces Connector Command Injection Vulnerabilities
MEDIUM (6.5)
Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, remote attacker to perform a command injection attack on an affected device. These vulnerabilities are due to insufficient input sanitization when executing affected commands. A high-privileged attacker could exploit these vulnerabilities on a Cisco DNA Spaces Connector by injecting crafted input during command execution. A successful exploit could allow the attacker to execute arbitrary commands as root within the Connector docker container.
Published: 2021-05-22T06:40:52.362Z
Updated: 2024-11-08T21:19:17.926Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-1559 |
vulnerable | 2026-06-08 05:28:15.014670 |
Cisco DNA Spaces Connector Command Injection Vulnerabilities
MEDIUM (6.5)
Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, remote attacker to perform a command injection attack on an affected device. These vulnerabilities are due to insufficient input sanitization when executing affected commands. A high-privileged attacker could exploit these vulnerabilities on a Cisco DNA Spaces Connector by injecting crafted input during command execution. A successful exploit could allow the attacker to execute arbitrary commands as root within the Connector docker container.
Published: 2021-05-22T06:40:48.712Z
Updated: 2024-11-08T21:19:32.592Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-1558 |
vulnerable | 2026-06-08 05:28:15.014206 |
Cisco DNA Spaces Connector Privilege Escalation Vulnerabilities
MEDIUM (6)
Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root. These vulnerabilities are due to insufficient restrictions during the execution of affected CLI commands. An attacker could exploit these vulnerabilities by leveraging the insufficient restrictions during execution of these commands. A successful exploit could allow the attacker to elevate privileges from dnasadmin and execute arbitrary commands on the underlying operating system as root.
Published: 2021-05-22T06:40:44.990Z
Updated: 2024-11-08T21:19:51.193Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-1557 |
vulnerable | 2026-06-08 05:28:15.013645 |
Cisco DNA Spaces Connector Privilege Escalation Vulnerabilities
MEDIUM (6)
Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root. These vulnerabilities are due to insufficient restrictions during the execution of affected CLI commands. An attacker could exploit these vulnerabilities by leveraging the insufficient restrictions during execution of these commands. A successful exploit could allow the attacker to elevate privileges from dnasadmin and execute arbitrary commands on the underlying operating system as root.
Published: 2021-05-22T06:40:41.359Z
Updated: 2024-11-08T21:20:04.789Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3586 |
vulnerable | 2026-06-08 05:25:56.059983 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15997 |
vulnerable | 2026-06-08 05:13:07.492622 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15996 |
vulnerable | 2026-06-08 05:13:07.492130 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15995 |
vulnerable | 2026-06-08 05:13:07.491452 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.