high7.8
CVE-2021-1419
A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the af…
Impact
A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Aironet 1542d Firmware | All versions |
| Cisco | Aironet 1562d Firmware | All versions |
| Cisco | Aironet 1815m Firmware | All versions |
| Cisco | Aironet 1830e Firmware | All versions |
| Cisco | Aironet 1840i Firmware | All versions |
| Cisco | Aironet 1850e Firmware | All versions |
| Cisco | Aironet 2800i Firmware | All versions |
| Cisco | Aironet 3800p Firmware | All versions |
| Cisco | Aironet 4800 Firmware | All versions |
| Cisco | Catalyst 9105axi Firmware | All versions |
| Cisco | Catalyst 9115axe Firmware | All versions |
| Cisco | Catalyst 9117 Firmware | All versions |