CVE-2021-1303: Cisco DNA Center Privilege Escalation Vulnerability
A vulnerability in the user management roles of Cisco DNA Center could allow an authenticated, remote attacker to execute unauthorized commands on an affected device. The vulnerability is due to improper enforcement of actions for assigned user roles. An attacker could exploit this vulnerability by authenticating as a user with an Observer role and executing commands on the affected device. A successful exploit could allow a user with the Observer role to execute commands to view diagnostic information of the devices that Cisco DNA Center manages.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-1303?
CVE-2021-1303 is a vulnerability in the user management roles of Cisco DNA Center that could allow an authenticated remote attacker to execute unauthorized commands on an affected device.
How severe is CVE-2021-1303?
CVE-2021-1303 has a severity rating of 8.8, which is considered high.
Which software versions are affected by CVE-2021-1303?
Cisco DNA Center versions up to and excluding 2.1.2.0 are affected by CVE-2021-1303.
How can an attacker exploit CVE-2021-1303?
An attacker can exploit CVE-2021-1303 by exploiting the improper enforcement of actions for assigned user roles in Cisco DNA Center.
Is there a reference link for CVE-2021-1303?
Yes, you can find the reference link for CVE-2021-1303 [here](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-privesc-6qjA3hVh).