CVE-2021-1572

CVE-2021-1572 is a privilege escalation vulnerability in Cisco ConfD and Network Services Orchestrator. It allows an authenticated, local attacker to execute arbitrary commands as root by exploiting an incorrectly privileged SFTP user service when the ConfD built-in SSH server is enabled. With a CVSS score of 7.8 (High), this vulnerability has a local attack vector, low attack complexity, and can lead to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.