CVEvulnerability
CVE-2021-1419
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-09-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-284
Description
A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.
Affected configurations
• cisco aironet 1542d firmware
• cisco aironet 1562d firmware
• cisco aironet 1815m firmware
• cisco aironet 1830e firmware
• cisco aironet 1840i firmware
• cisco aironet 1850e firmware
• cisco aironet 2800i firmware
• cisco aironet 3800p firmware
• cisco aironet 4800 firmware
• cisco catalyst 9105axi firmware
• cisco catalyst 9115axe firmware
• cisco catalyst 9117 firmware
• cisco catalyst 9120axi firmware
• cisco catalyst 9124axd firmware
• cisco catalyst 9130axe firmware
• cisco catalyst iw6300 ac firmware
• cisco esw6300 firmware
• cisco 1100-8p firmware
• cisco 1120 firmware
• cisco 1160 firmware
• cisco wireless lan controller software (>= 8.10 < 8.10.151.0)
• cisco catalyst 9800 firmware (>= 16.12 < 16.12.6)
• cisco catalyst 9800 firmware (>= 17.3 < 17.3.3)
• cisco catalyst 9800 firmware 17.4
• cisco aironet 1542i firmware
• cisco aironet 1562e firmware
• cisco aironet 1562i firmware
• cisco aironet 1815w firmware
• cisco aironet 1815t firmware
• cisco aironet 1815i firmware
• cisco aironet 1830i firmware
• cisco aironet 1850i firmware
• cisco aironet 2800e firmware
• cisco aironet 3800i firmware
• cisco aironet 3800e firmware
• cisco catalyst 9105axw firmware
• cisco catalyst 9115axi firmware
• cisco catalyst 9120axp firmware
• cisco catalyst 9120axe firmware
• cisco catalyst 9124axi firmware
• cisco catalyst 9130axi firmware
• cisco catalyst iw6300 dc firmware
• cisco catalyst iw6300 dcw firmware
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness