CVE-2021-1359
A vulnerability in the configuration management of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied XML input for the web interface. An attacker could exploit this vulnerability by uploading crafted XML configuration files that contain scripting code to a vulnerable device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root. An attacker would need a valid user account with the rights to upload configuration files to exploit this vulnerability.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.3
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- EPSS probability
- 1.18%
- CWE
- CWE-112
- Published
- 2021-07-08
- Last modified
- 2026-03-13
Affected products
- Cisco Cisco Web Security Appliance (WSA)
Weakness type
Related vulnerabilities
- CVE-2026-1190 — Org.keycloak/keycloak-services: keycloak saml brokering: response delay due to unchecked notonorafter in subjectconfirmationdata
- CVE-2023-40310 — Missing XML Validation vulnerability in SAP PowerDesigner Client BPMN2 import
- CVE-2021-27780 — HCL BigFix Mobile / Modern Client Management is vulnerable to unauthenticated XML interaction
- CVE-2022-28213 — When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform -...
- CVE-2020-27282 — In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in...
- CVE-2020-1975 — Missing XML Validation in PAN-OS Web Interface