CVE-2021-42786

Published: Mar 10, 2022Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) has Remote Code Execution vulnerabilities in multiple instances of the API requests. The affected endpoints do not have any input validation of the user's input that allowed a malicious payload to be injected.

Affected (3)

Products: Riverbed: Steelcentral Appinternals Dynamic Sampling Agent

Riverbed

1 product

Steelcentral Appinternals Dynamic Sampling Agent

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Riverbed Steelcentral Appinternals Dynamic Sampling Agent	From 11.0.0 to 11.8.8
Riverbed Steelcentral Appinternals Dynamic Sampling Agent	From 12.0.0 to 12.13.0
Riverbed Steelcentral Appinternals Dynamic Sampling Agent	Version 10.0.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://aternity.force.com/customersuccess/s/article/Remote-Code-Execution-at-AgentControllerServlet-CVE-2021-42786

Source: cve_disclosure@tech.gov.sg

Third Party Advisory

https://aternity.force.com/customersuccess/s/article/Remote-Code-Execution-at-AgentControllerServlet-CVE-2021-42786

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.