CVE-2021-1222

CVE-2021-1222 describes a high-severity SQL injection vulnerability in the web-based management interface of Cisco Smart Software Manager Satellite. An authenticated, remote attacker could exploit this flaw due to improper validation of SQL query values. Successful exploitation could lead to unauthorized modification or retrieval of data from the underlying database or operating system. The vulnerability has a CVSS score of 8.1 (High), indicating a low attack complexity and requiring only low privileges for an attacker to achieve high impact on confidentiality and integrity. Despite its severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.