{"uuid": "6e96fb8a-6550-4466-9051-4da958ca04cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1574", "type": "seen", "source": "https://t.me/hacking_Attack/16235", "content": "Black Hat Ethical Hacking\nCisco BPA, WSA Bugs Allow Remote Cyberattacks\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Cisco BPA, WSA Bugs Allow Remote CyberattacksPost Views: 38 \nReading Time: 1 Minute\nA set of high-severity privilege-escalation vulnerabilities affecting Business Process Automation (BPA) application and Cisco\u2019s Web Security Appliance (WSA) and could allow authenticated, remote attackers to access sensitive data or take over a targeted system.\nThe first two bugs (CVE-2021-1574 and CVE-2021-1576) exist in the web-based management interface of the Cisco Business Process Automation (BPA), which is used to streamline various IT processes. Its functions include OS upgrades, device activation, compliance checks and server migration.\n\nThe flaws, which both rate 8.8 out of 10 on the CVSS vulnerability-severity scale, could allow an authenticated, remote attacker to elevate privileges to administrator-level. A successful exploit would involve sending crafted HTTP messages to an affected system.\n\n\u201cThese vulnerabilities are due to improper authorization enforcement for specific features and for access to log files that contain confidential information,\u201d according to Cisco\u2019s Thursday advisory. Exploitation could result in an adversary \u201cperforming unauthorized actions with the privileges of an administrator, or by retrieving sensitive data from the logs and using it to impersonate a legitimate privileged user,\u201d the company noted.\n\n* For CVE-2021-1574, an attacker with valid user credentials could execute unauthorized commands;\n* For CVE-2021-1576, an attacker with valid credentials could access the logging subsystem of an affected system and retrieve sensitive data. The system is vulnerable only while a legitimate user maintains an active session on the system, Cisco noted.\n\nThe vulnerabilities affect Cisco BPA releases earlier than Release 3.1.\nSee Also: Kaseya ransomware supply chain attack: What you need to know Meanwhile, the third bug affects Cisco\u2019s WSA appliance, which provides protection for those using a corporate network to access the web, by automatically blocking risky sites and testing unknown sites before allowing users to click on them.\n\nThe issue (CVE-2021-1359, with a CVSS score of 6.3 out of 10) exists in the configuration management of the Cisco AsyncOS operating system that powers the WSA. According to Cisco\u2019s advisory, it could allow an authenticated, remote attacker to perform command injection and elevate privileges to root.\n\n\u201cThis vulnerability is due to insufficient validation of user-supplied XML input for the web interface,\u201d the networking giant explained. \u201cAn attacker could exploit this vulnerability by uploading crafted XML configuration files that contain scripting code to a vulnerable device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root.\u201d\n\nThe bug rates high-severity rather than critical since any would-be attacker would need a valid user account with the rights to upload configuration files in order to exploit the bug \u2013 something that could be achieved via another exploit or phishing attack.\nSee Also: Offensive Security Tool: It Was All A Dream (Windows Print Spooler RCE) Badly programmed APIs are an obvious attack vector\u00a0and one of the most common threat vectors used to take advantage of poorly secured applications\u00a0to get to data. They\u2019re as common as dandelions in spring: When researcher Alissa Knight with Approov tried to break into the APIs of 30 different mHealth app vendors, she found that they were all vulnerable\u00a0to one degree or another. Seventy-seven percent of them contained hardcoded API k[...]", "creation_timestamp": "2026-09-02T01:03:07.653254Z"}