What’s Vulnerable › Vulnerabilities

CVE-2021-1560: Cisco DNA Spaces Connector Command Injection Vulnerabilities

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-05-22 · updated 2026-06-17
• Weakness: CWE-78

Description

Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, remote attacker to perform a command injection attack on an affected device. These vulnerabilities are due to insufficient input sanitization when executing affected commands. A high-privileged attacker could exploit these vulnerabilities on a Cisco DNA Spaces Connector by injecting crafted input during command execution. A successful exploit could allow the attacker to execute arbitrary commands as root within the Connector docker container.

Affected products

• Cisco DNA Spaces Connector: before 2.0.519 — fixed in 2.0.519

How to fix

Upgrade to a fixed version: Cisco DNA Spaces Connector 2.0.519. Check the vendor advisory for mitigations.

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnasp-conn-cmdinj-HOj4YV5n
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnasp-conn-cmdinj-HOj4YV5n

Get alerted when CVE-2021-1560 or the next vulnerability affects your stack