Is CVE-2021-1492 actively exploited?

No active exploitation of CVE-2021-1492 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2021-1492 be exploited remotely?

No. CVE-2021-1492 requires local access to exploit.

What is the CVSS score of CVE-2021-1492?

CVE-2021-1492 has a CVSS score of 7.1 (HIGH).

HOME VULNERABILITIESCVE-2021-1492

HIGH

CVE-2021-1492

CWE-64Published: March 25, 2021· Updated: Jun 17, 2026

7.1

CVSS v3.1

Official Description

The Duo Authentication Proxy installer prior to 5.2.1 did not properly validate file installation paths. This allows an attacker with local user privileges to coerce the installer to write to arbitrary privileged directories. If successful, an attacker can manipulate files used by Duo Authentication Proxy installer, cause Denial of Service (DoS) by deleting file(s), or replace system files to potentially achieve elevation of privileges. This is only exploitable during new installations, while the installer is running, and is not exploitable once installation has finished. Versions 5.2.1 of Duo Authentication Proxy installer addresses this issue.

NVD Source

Technical Analysis

CVE-2021-1492 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.1.