HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2021-1419

CVSS 7.8v3.1pub. 2021-09-23upd. 2024-11-21

A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Cisco 1100 8p

    HW
    Cisco
    all versions

  • Cisco 1100 8p Firmware

    OS
    Cisco
    all versions

  • Cisco 1120

    HW
    Cisco
    all versions

  • Cisco 1120 Firmware

    OS
    Cisco
    all versions

  • Cisco 1160 Firmware

    OS
    Cisco
    all versions

  • Cisco 1160 Integrated Services Router

    HW
    Cisco
    all versions

  • Cisco Aironet 1542d

    HW
    Cisco
    all versions

  • Cisco Aironet 1542d Firmware

    OS
    Cisco
    all versions

  • Cisco Aironet 1542i

    HW
    Cisco
    all versions

  • Cisco Aironet 1542i Firmware

    OS
    Cisco
    all versions

  • Cisco Aironet 1562d

    HW
    Cisco
    all versions

  • Cisco Aironet 1562d Firmware

    OS
    Cisco
    all versions

  • Cisco Aironet 1562e

    HW
    Cisco
    all versions

  • Cisco Aironet 1562e Firmware

    OS
    Cisco
    all versions

  • Cisco Aironet 1562i

    HW
    Cisco
    all versions

  • Cisco Aironet 1562i Firmware

    OS
    Cisco
    all versions

  • Cisco Aironet 1815i

    HW
    Cisco
    all versions

  • Cisco Aironet 1815i Firmware

    OS
    Cisco
    all versions

  • Cisco Aironet 1815m

    HW
    Cisco
    all versions

  • Cisco Aironet 1815m Firmware

    OS
    Cisco
    all versions

  • Cisco Aironet 1815t

    HW
    Cisco
    all versions

  • Cisco Aironet 1815t Firmware

    OS
    Cisco
    all versions

  • Cisco Aironet 1815w

    HW
    Cisco
    all versions

  • Cisco Aironet 1815w Firmware

    OS
    Cisco
    all versions

  • Cisco Aironet 1830e

    HW
    Cisco
    all versions

  • Cisco Aironet 1830e Firmware

    OS
    Cisco
    all versions

  • Cisco Aironet 1830i

    HW
    Cisco
    all versions

  • Cisco Aironet 1830i Firmware

    OS
    Cisco
    all versions

  • Cisco Aironet 1840i

    HW
    Cisco
    all versions

  • Cisco Aironet 1840i Firmware

    OS
    Cisco
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2017-12240CRITICAL9.8⚠ KEVPL ✓same product

Buffer overflow w DHCP relay Cisco IOS — RCE bez uwierzytelnienia

CVE-2022-20695CRITICAL10.0PL ✓same product

Cisco WLC — pominięcie uwierzytelnienia przez management interface

CVE-2021-34727CRITICAL9.8PL ✓same product

Buffer overflow w procesie vDaemon Cisco IOS XE SD-WAN — RCE z uprawnieniami root

CVE-2021-34770CRITICAL10.0PL ✓same product

RCE i DoS w obsłudze protokołu CAPWAP w Cisco IOS XE dla Catalyst 9000

CVE-2020-3258CRITICAL9.8PL ✓same product

RCE w Cisco IOS dla routerów przemysłowych ISR i CGR1000