7.8
CWE
284
Advisory Published
Updated

CVE-2021-1419: Cisco Access Points SSH Management Privilege Escalation Vulnerability

First published: Thu Sep 23 2021(Updated: )

A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.

Credit: ykramarz@cisco.com ykramarz@cisco.com

Affected SoftwareAffected VersionHow to fix
Cisco Aironet 1542d Firmware
Cisco Aironet 1542d
Cisco Aironet 1562d Firmware
Cisco Aironet 1562d
Cisco Aironet 1815m Firmware
Cisco Aironet 1815m
Cisco Aironet 1830e Firmware
Cisco Aironet 1830e
Cisco Aironet 1840i Firmware
Cisco Aironet 1840i
Cisco Aironet 1850e Firmware
Cisco Aironet 1850e
Cisco Aironet 2800i Firmware
Cisco Aironet 2800i
Cisco Aironet 3800p Firmware
Cisco Aironet 3800p
Cisco Aironet 4800 Firmware
Cisco Aironet 4800
Cisco Catalyst 9105axi Firmware
Cisco Catalyst 9105axi
Cisco Catalyst 9115axe Firmware
Cisco Catalyst 9115axe
Cisco Catalyst 9117 Firmware
Cisco Catalyst 9117axi
Cisco Catalyst 9120axi Firmware
Cisco Catalyst 9120axi
Cisco Catalyst 9124axd Firmware
Cisco Catalyst 9124axd
Cisco Catalyst 9130axe Firmware
Cisco Catalyst 9130axe
Cisco Catalyst Iw6300 Ac Firmware
Cisco Catalyst Iw6300 Ac
Cisco Esw6300 Firmware
Cisco Esw6300
Cisco 1100-8p Firmware
Cisco 1100-8p
Cisco 1120 Firmware
Cisco 1120
Cisco 1160 Firmware
Cisco 1160 Integrated Services Router
Cisco Wireless LAN Controller Software>=8.10<8.10.151.0
Cisco Catalyst 9800 Firmware>=16.12<16.12.6
Cisco Catalyst 9800 Firmware>=17.3<17.3.3
Cisco Catalyst 9800 Firmware=17.4
Cisco Catalyst 9800-l
Cisco Aironet 1542i Firmware
Cisco Aironet 1542i
Cisco Catalyst 9800-cl
Cisco Catalyst 9800-40
Cisco Catalyst 9800-80
Cisco Aironet 1562e Firmware
Cisco Aironet 1562e
Cisco Aironet 1562i Firmware
Cisco Aironet 1562i
Cisco Aironet 1815w Firmware
Cisco Aironet 1815w
Cisco Aironet 1815t Firmware
Cisco Aironet 1815t
Cisco Aironet 1815i Firmware
Cisco Aironet 1815i
Cisco Aironet 1830i Firmware
Cisco Aironet 1830i
Cisco Aironet 1850i Firmware
Cisco Aironet 1850i
Cisco Aironet 2800e Firmware
Cisco Aironet 2800e
Cisco Aironet 3800i Firmware
Cisco Aironet 3800i
Cisco Aironet 3800e Firmware
Cisco Aironet 3800e
Cisco Catalyst 9105axw Firmware
Cisco Catalyst 9105axw
Cisco Catalyst 9115axi Firmware
Cisco Catalyst 9115axi
Cisco Catalyst 9120axp Firmware
Cisco Catalyst 9120axp
Cisco Catalyst 9120axe Firmware
Cisco Catalyst 9120axe
Cisco Catalyst 9124axi Firmware
Cisco Catalyst 9124axi
Cisco Catalyst 9130axi Firmware
Cisco Catalyst 9130axi
Cisco Catalyst Iw6300 Dc Firmware
Cisco Catalyst Iw6300 Dc
Cisco Catalyst Iw6300 Dcw Firmware
Cisco Catalyst Iw6300 Dcw

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203