[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fh4Xo2HynY5cVzaBY-eRs5LtkLXZ_GWQJRW4AvnO2Dyw":3,"g5a-risk:CVE-2021-1258":143},{"success":4,"data":5,"meta":141},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":27,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":61,"references":62,"referencesCount":73,"weaknesses":74,"weaknessesCount":83,"isActivelyExploited":84,"cisaInfo":27,"otxData":27,"relatedBlogPosts":85,"seoMetadata":86,"configurations":111,"relatedVendorCves":139,"notableEvents":140},"CVE-2021-1258","What is CVE-2021-1258?","A vulnerability in the upgrade component of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker with low privileges to read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to insufficient file permission restrictions. An attacker could exploit this vulnerability by sending a crafted command from the local CLI to the application. A successful exploit could allow the attacker to read arbitrary files on the underlying OS of the affected device. The attacker would need to have valid user credentials to exploit this vulnerability.","A vulnerability in the upgrade component of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker with low privileges to read ...","2021-01-13T22:15:21.287","2023-11-07T03:27:48.967",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":34,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"d1c1063e-7a18-46af-9102-31f8928bc633","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[35],{"Source":17,"Type":18,"CVSSData":36,"BaseSeverity":22,"ExploitabilityScore":41,"ImpactScore":42,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":37,"VectorString":38,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":39,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":40,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",2.1,3.9,2.9,0.00341,[43,43,43,43,43,43,43],"Medium",[47,52,56],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"cisco","anyconnect_secure_mobility_client","*","cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:linux_kernel:*:*",{"vendor":53,"product":54,"version":50,"criteria":55,"vulnerable":4},"mcafee","agent_epolicy_orchestrator_extension","cpe:2.3:a:mcafee:agent_epolicy_orchestrator_extension:*:*:*:*:*:*:*:*",{"vendor":57,"product":58,"version":59,"criteria":60,"vulnerable":4},"microsoft","windows","-","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",3,[63,68],{"url":64,"source":65,"tags":66},"https:\u002F\u002Fkc.mcafee.com\u002Fcorporate\u002Findex?page=content&id=SB10382","Mcafee",[67],"Third Party Advisory",{"url":69,"source":70,"tags":71},"https:\u002F\u002Ftools.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-anyconnect-fileread-PbHbgHMj","Cisco",[72],"Vendor Advisory",2,[75],{"id":76,"name":77,"description":78,"extendedDescription":79,"status":80,"abstraction":81,"structure":82},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","","Draft","Class","Simple",1,false,[],{"title":87,"metaDescription":88,"keywords":89,"canonicalUrl":90,"structuredData":91},"What is CVE-2021-1258? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-1258, a medium severity cyber security vulnerability from 2021. A vulnerability in the upgrade component of Cisco AnyConne...","CVE-2021-1258, CVE-2021-1258 vulnerability, CVE-2021-1258 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, cisco security, mcafee security, microsoft security, anyconnect_secure_mobility_client vulnerability, agent_epolicy_orchestrator_extension vulnerability, windows vulnerability","\u002Fwhat-is\u002Fcve-2021-1258",{"@context":92,"@type":93,"headline":87,"description":88,"datePublished":10,"dateModified":11,"author":94,"publisher":98,"about":102,"mainEntityOfPage":106,"articleSection":109,"keywords":110},"https:\u002F\u002Fschema.org","TechArticle",{"@type":95,"name":96,"url":97},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":95,"name":96,"url":97,"logo":99},{"@type":100,"url":101},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":103,"name":6,"description":104,"additionalType":105},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":107,"@id":108},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-1258","Cybersecurity","CVE-2021-1258, CVE-2021-1258 vulnerability, CVE-2021-1258 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[112,127],{"Operator":27,"Negate":27,"Nodes":113},[114],{"Operator":115,"Negate":27,"CPEMatch":116},"OR",[117,120,123],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":118,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":119,"VersionEndIncluding":27},"437D6FD7-BBD1-47AC-B1A1-553A3E4BBE23","4.9.03047",{"Vulnerable":4,"Criteria":121,"MatchCriteriaID":122,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":119,"VersionEndIncluding":27},"cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:macos:*:*","C4D4811F-C38B-4BC2-BC57-5A55215370AB",{"Vulnerable":4,"Criteria":124,"MatchCriteriaID":125,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":126,"VersionEndIncluding":27},"cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:windows:*:*","3A2F752C-F227-4FFE-B5D5-A27179AC33D3","4.9.03049",{"Operator":128,"Negate":27,"Nodes":129},"AND",[130,135],{"Operator":115,"Negate":27,"CPEMatch":131},[132],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":133,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":134,"VersionEndIncluding":27},"E1B3C345-1F99-4D64-9135-BAA5F5EE1812","5.7.6",{"Operator":115,"Negate":27,"CPEMatch":136},[137],{"Vulnerable":27,"Criteria":60,"MatchCriteriaID":138,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A2572D17-1DE6-457B-99CC-64AFD54487EA",[],[],{"lastModified":11,"cacheTime":142,"version":37},1792359011440,{"score":144,"band":145,"action":146,"scoredAt":147},18,"Info","Track","2026-10-16T06:50:17.197981+00:00"]