CVE-2021-42855

7.8 highEPSS 0.2%

High (7.8) in riverbed steelcentral appinternals dynamic sampling agent. EPSS 0.2% chance of exploitation in the next 30 days.

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) uses the ".debug_command.config" file to store a json string that contains a list of IDs and pre-configured commands. The config file is subsequently used by the "/api/appInternals/1.0/agent/configuration" API to map the corresponding ID to a command to be executed.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
CWEs: CWE-732, CWE-284
Published: 2022-03-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

riverbed:steelcentral_appinternals_dynamic_sampling_agent

References

https://aternity.force.com/customersuccess/s/article/Local-privilege-escalation-due-to-misconfigured-write-permission-on-debug-command-config-file-CVE-2021-42855
https://aternity.force.com/customersuccess/s/article/Local-privilege-escalation-due-to-misconfigured-write-permission-on-debug-command-config-file-CVE-2021-42855

Check your stack JSON