What is CVE-2021-42786?

CVE-2021-42786 is a critical-severity vulnerability in Aternity Steelcentral Appinternals Dynamic Sampling Agent, classified under Improper Input Validation. CVSS score: 9.8/10. Published 2022-03-10.

How severe is CVE-2021-42786?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Improper input validation in Aternity Steelcentral Appinternals Dynamic Sampling Agent

CVE-2021-42786

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) has Remote Code Execution vulnerabilities in multiple instances of the API requests. The affected endpoints do not have any input validation of the user's input that allowed a malicious payload to be injected.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.020 (78.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Aternity Steelcentral Appinternals Dynamic Sampling Agent — versions 10.x, 12.13.0, 11.8.8
Riverbed Steelcentral_appinternals_dynamic_sampling_agent — versions 10.0.0

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve_disclosure@tech.gov.sg (x_refsource_CONFIRM, Third Party Advisory)

Frequently asked questions

What is CVE-2021-42786?: CVE-2021-42786 is a critical-severity vulnerability in Aternity Steelcentral Appinternals Dynamic Sampling Agent, classified under Improper Input Validation. CVSS score: 9.8/10. Published 2022-03-10.
How severe is CVE-2021-42786?: Critical severity. CVSS v3 base score is 9.8 out of 10.