NetSight
high7.8

CVE-2021-1419

A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the af…

Impact

A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.

Affected products

VendorProductAffected versions
CiscoAironet 1542d Firmware
All versions
CiscoAironet 1562d Firmware
All versions
CiscoAironet 1815m Firmware
All versions
CiscoAironet 1830e Firmware
All versions
CiscoAironet 1840i Firmware
All versions
CiscoAironet 1850e Firmware
All versions
CiscoAironet 2800i Firmware
All versions
CiscoAironet 3800p Firmware
All versions
CiscoAironet 4800 Firmware
All versions
CiscoCatalyst 9105axi Firmware
All versions
CiscoCatalyst 9115axe Firmware
All versions
CiscoCatalyst 9117 Firmware
All versions

Weakness classification

References