CVEvulnerability

CVE-2021-1419

7.8 HIGH Published 2021-09-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-09-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-284

Description

A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.

Affected configurations

• cisco aironet 1542d firmware • cisco aironet 1562d firmware • cisco aironet 1815m firmware • cisco aironet 1830e firmware • cisco aironet 1840i firmware • cisco aironet 1850e firmware • cisco aironet 2800i firmware • cisco aironet 3800p firmware • cisco aironet 4800 firmware • cisco catalyst 9105axi firmware • cisco catalyst 9115axe firmware • cisco catalyst 9117 firmware • cisco catalyst 9120axi firmware • cisco catalyst 9124axd firmware • cisco catalyst 9130axe firmware • cisco catalyst iw6300 ac firmware • cisco esw6300 firmware • cisco 1100-8p firmware • cisco 1120 firmware • cisco 1160 firmware • cisco wireless lan controller software (>= 8.10 < 8.10.151.0) • cisco catalyst 9800 firmware (>= 16.12 < 16.12.6) • cisco catalyst 9800 firmware (>= 17.3 < 17.3.3) • cisco catalyst 9800 firmware 17.4 • cisco aironet 1542i firmware • cisco aironet 1562e firmware • cisco aironet 1562i firmware • cisco aironet 1815w firmware • cisco aironet 1815t firmware • cisco aironet 1815i firmware • cisco aironet 1830i firmware • cisco aironet 1850i firmware • cisco aironet 2800e firmware • cisco aironet 3800i firmware • cisco aironet 3800e firmware • cisco catalyst 9105axw firmware • cisco catalyst 9115axi firmware • cisco catalyst 9120axp firmware • cisco catalyst 9120axe firmware • cisco catalyst 9124axi firmware • cisco catalyst 9130axi firmware • cisco catalyst iw6300 dc firmware • cisco catalyst iw6300 dcw firmware

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References