CVE-2021-1538

CVE-2021-1538 is a critical vulnerability in Cisco Common Services Platform Collector (CSPC) that allows an authenticated, remote attacker to execute arbitrary code. This flaw stems from insufficient sanitization of configuration entries, enabling a super admin to inject crafted input into the configuration dashboard. A successful exploit could lead to remote code execution as root. The vulnerability carries a CVSS score of 7.2 (HIGH), indicating a network-based attack with low attack complexity, requiring high privileges, and resulting in high impact to confidentiality, integrity, and availability. Despite its severity, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.