Search/CVE-2021-1419
● CVE — High

CVE-2021-1419

VendorciscoProductwireless lan controller software, aironet 4800 firmware, aironet 1542d firmware, aironet 1542i firmware, aironet 1562d firmware, aironet 1562e firmware, aironet 1562i firmware, aironet 2800i firmware, aironet 3800p firmware, 1100-8p firmware, 1120 firmware, 1160 firmware, aironet 1815m firmware, aironet 1830e firmware, aironet 1840i firmware, aironet 1850e firmware, catalyst 9105axi firmware, catalyst 9115axe firmware, catalyst 9117 firmware, catalyst 9120axi firmware, catalyst 9124axd firmware, catalyst 9130axe firmware, catalyst 9800 firmware, catalyst iw6300 ac firmware, esw6300 firmwareDiscoveredSep 23, 2021UpdatedNov 21, 2024

A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.

CVSS v3.1
7.8 HIGH
EPSS
0.22%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
Sep 23, 2021
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024