What’s Vulnerable › Vulnerabilities

CVE-2021-34785: Cisco BroadWorks CommPilot Application Software Vulnerabilities

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-09-09 · updated 2026-06-17
• Weakness: CWE-620

Description

Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system.

Affected products

• Cisco Broadworks Commpilot Application Software: from 22.0 before 22.0.2021.09; from 23.0 before 23.0.2021.09; from 24.0 before 24.0.2021.09 — fixed in 22.0.2021.09, 23.0.2021.09, 24.0.2021.09

How to fix

Upgrade to a fixed version: Cisco Broadworks Commpilot Application Software 22.0.2021.09, 23.0.2021.09, 24.0.2021.09. Check the vendor advisory for mitigations.

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-broadworks-dJ9JT67N
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-broadworks-dJ9JT67N

Get alerted when CVE-2021-34785 or the next vulnerability affects your stack