{"uuid": "53526c3f-a5e0-4fb8-8d21-83154318c4ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1567", "type": "seen", "source": "https://t.me/hacking_Attack/13350", "content": ".\n\nThe issue tracked as CVE-2021-1543, meanwhile, allows cross-site scripting from an unauthenticated, remote attacker (CVSS score: 6.1).\n\n\u201cThis vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected device,\u201d according to Cisco. \u201cAn attacker could exploit this vulnerability by persuading a user to click a malicious link and access a specific page. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information and redirect the user to an arbitrary page.\u201d\n\nAnd finally, CVE-2021-1571\u00a0(rating 6.1 on the CVSSscale) could allow an unauthenticated, remote attacker to conduct a HTML injection attack.\n\n\u201cThis vulnerability is due to improper checks of parameter values in affected pages,\u201d according to the advisory. \u201cAn attacker could exploit this vulnerability by persuading a user to follow a crafted link that is designed to pass HTML code into an affected parameter. A successful exploit could allow the attacker to alter the contents of a web page to redirect the user to potentially malicious websites.\u201d See Also: Jeff Moss, aka Dark Tangent, the person who founded DEF CON and Black Hat Cisco\u2019s Other High-Severity Security HolesThe other high-severity bugs that Cisco addressed on Wednesday include the certificate-validation vulnerability (CVE-2021-1566) in the Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance (WSA). It exists in the way the Cisco Advanced Malware Protection (AMP) for Endpoints integrates Cisco AsyncOS. If exploited, the bug could allow an unauthenticated, remote attacker to intercept traffic between an affected device and the AMP servers. It rates 7.4 on the 10-point CVSS bug-severity scale.\n\n\u201cThis vulnerability is due to improper certificate validation when an affected device establishes TLS connections,\u201d according to the advisory. \u201cA man-in-the-middle attacker could exploit this vulnerability by sending a crafted TLS packet to an affected device. A successful exploit could allow the attacker to spoof a trusted host and then extract sensitive information or alter certain API requests.\u201d\n\nThe bug (CVE-2021-1134) in the Cisco DNA Center, a network controller and management dashboard, also rates 7.4. It exists in the Cisco Identity Services Engine (ISE) integration feature of the software, and could also allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data.\n\n\u201cThe vulnerability is due to an incomplete validation of the X.509 certificate used when establishing a connection between DNA Center and an ISE server,\u201d according to the advisory. \u201cAn attacker could exploit this vulnerability by supplying a crafted certificate and could then intercept communications between the ISE and DNA Center. A successful exploit could allow the attacker to view and alter sensitive information that the ISE maintains about clients that are connected to the network.\u201d\n\nAnd finally, a vulnerability (CVE-2021-1567) in the DLL loading mechanism of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack.\n\nIt\u2019s only exploitable if the VPN Posture (HostScan) Module is installed on the AnyConnect client, and it carries a 7.0 CVSS rating. VPN Posture helps to gather information about what operating system, antivirus, antispyware and other installed software is present on remote hosts, and it performs endpoint assessment while allowing a connection to the VPN.\n\n\u201cThis vulnerability is due to a race condition in the signature verification process for DLL files that are loaded on an affected device,\u201d according to Cisco. \u201cAn attacker could exploit this vulnerability by sending a series of crafted interprocess communication (IPC) messages to the AnyConnect process. A successful exploit could allow the attacker to exe[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:12.071032Z"}