CVE-2021-42786

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) has Remote Code Execution vulnerabilities in multiple instances of the API requests. The affected endpoints do not have any input validation of the user's input that allowed a malicious payload to be injected.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Mar 10, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-427879.8It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentConfigurationServlet has directory traversal vulner CVE-2021-42799.8A vulnerability has been found in Starcounter-Jack JSON-Patch up to 3.1.0 and classified as problematic. This vulnerability affects unknown CVE-2021-427917.3An issue was discovered in VeridiumID VeridiumAD 2.5.3.0. The HTTP request to trigger push notifications for VeridiumAD enrolled users does CVE-2021-427945.3An issue was discovered in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior. The application allows a client to provide a CVE-2021-427969.8An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that allows unauthenticate CVE-2021-427977.5Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior allows an unauthenticated user to steal t CVE-2021-42806.5A vulnerability was found in styler_praat_scripts. It has been classified as problematic. Affected is an unknown function of the file file_s CVE-2021-428086.7Improper Access Control in Thales Sentinel Protection Installer could allow a local user to escalate privileges.CVE-2021-428097.8Improper Access Control of Dynamically-Managed Code Resources (DLL) in Thales Sentinel Protection Installer could allow the execution of arb CVE-2021-42819.8A vulnerability was found in Brave UX for-the-badge and classified as critical. Affected by this issue is some unknown functionality of the CVE-2021-428107.8A flaw in the previous versions of the product may allow an authenticated attacker the ability to execute code as a privileged user on a sys CVE-2021-428116.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in SafeNet KeySecure allows an authenticated us