CVE-2021-1141: Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands…

PriorityP264high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

3.96%

89.3th percentile

Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this advisory.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
cisco	cisco_smart_software_manager_on-prem	—	—
cisco	smart	—	—
cisco	smart_software_manager_satellite	<= 5.1.0	—

Detection & IOCsextracted from sources · hover to see the quote

·No technical details, payloads, specific endpoints, or exploitation mechanics are disclosed in the available sources. The advisory references a 'Details section' but that content was not provided, leaving no actionable IOCs or detection hints extractable. ↗
·Multiple CVEs are bundled under this advisory (including CSCvm42428, CSCvm42436, CSCvm42548). CVE-2021-1141 specifically maps to CWE-20 (Improper Input Validation) but no per-CVE technical breakdown is available in the provided sources. ↗
·No workarounds exist per the vendor; detection must rely on patching status and network-level monitoring of the Cisco Smart Software Manager Satellite web UI. ↗

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C

vendor_cisco9.8CRITICAL

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.