CVE-2021-1419: Cisco Access Points SSH Management Privilege Escalation Vulnerability

Published Sep 23, 2021
·
Updated

A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.

Affected Software

86 affected components
Cisco Aironet 1542d Firmware
Cisco Aironet 1542d
Cisco Aironet 1562d Firmware
Cisco Aironet 1562d
Cisco Aironet 1815m Firmware
Cisco Aironet 1815m
Cisco Aironet 1830e Firmware
Cisco Aironet 1830e
Cisco Aironet 1840i Firmware
Cisco Aironet 1840i
Cisco Aironet 1850e Firmware
Cisco Aironet 1850e
Cisco Aironet 2800i Firmware
Cisco Aironet 2800i
Cisco Aironet 3800p Firmware
Cisco Aironet 3800p
Cisco Aironet 4800 Firmware
Cisco Aironet 4800
Cisco Catalyst 9105axi Firmware
Cisco Catalyst 9105axi
Cisco Catalyst 9115axe Firmware
Cisco Catalyst 9115axe
Cisco Catalyst 9117 Firmware
Cisco Catalyst 9117axi
Cisco Catalyst 9120axi Firmware
Cisco Catalyst 9120axi
Cisco Catalyst 9124axd Firmware
Cisco Catalyst 9124axd
Cisco Catalyst 9130axe Firmware
Cisco Catalyst 9130axe
Cisco Catalyst Iw6300 Ac Firmware
Cisco Catalyst Iw6300 Ac
Cisco Esw6300 Firmware
Cisco Esw6300
Cisco 1100-8p Firmware
Cisco 1100-8p
Cisco 1120 Firmware
Cisco 1120
Cisco 1160 Firmware
Cisco 1160 Integrated Services Router
Cisco Wireless LAN Controller Software>=8.10<8.10.151.0
Cisco Catalyst 9800 Firmware>=16.12<16.12.6
Cisco Catalyst 9800 Firmware>=17.3<17.3.3
Cisco Catalyst 9800 Firmware=17.4
Cisco Catalyst 9800-l
Cisco Aironet 1542i Firmware
Cisco Aironet 1542i
Cisco Catalyst 9800-cl
Cisco Catalyst 9800-40
Cisco Catalyst 9800-80
Cisco Aironet 1562e Firmware
Cisco Aironet 1562e
Cisco Aironet 1562i Firmware
Cisco Aironet 1562i
Cisco Aironet 1815w Firmware
Cisco Aironet 1815w
Cisco Aironet 1815t Firmware
Cisco Aironet 1815t
Cisco Aironet 1815i Firmware
Cisco Aironet 1815i
Cisco Aironet 1830i Firmware
Cisco Aironet 1830i
Cisco Aironet 1850i Firmware
Cisco Aironet 1850i
Cisco Aironet 2800e Firmware
Cisco Aironet 2800e
Cisco Aironet 3800i Firmware
Cisco Aironet 3800i
Cisco Aironet 3800e Firmware
Cisco Aironet 3800e
Cisco Catalyst 9105axw Firmware
Cisco Catalyst 9105axw
Cisco Catalyst 9115axi Firmware
Cisco Catalyst 9115axi
Cisco Catalyst 9120axp Firmware
Cisco Catalyst 9120axp
Cisco Catalyst 9120axe Firmware
Cisco Catalyst 9120axe
Cisco Catalyst 9124axi Firmware
Cisco Catalyst 9124axi
Cisco Catalyst 9130axi Firmware
Cisco Catalyst 9130axi
Cisco Catalyst Iw6300 Dc Firmware
Cisco Catalyst Iw6300 Dc
Cisco Catalyst Iw6300 Dcw Firmware
Cisco Catalyst Iw6300 Dcw

Event History

Sep 23, 2021
CVE Published
via MITRE·02:30 AM
Data Sourced
via MITRE·02:30 AM
DescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2021-1419?

CVE-2021-1419 is classified as a high severity vulnerability.

2

How do I fix CVE-2021-1419?

To mitigate CVE-2021-1419, it is recommended to update affected Cisco Access Points to the latest firmware version.

3

What devices are affected by CVE-2021-1419?

The affected devices include various Cisco Access Points like Aironet 1542D, 1562, 1815M, and others.

4

What is the impact of CVE-2021-1419?

CVE-2021-1419 allows a local, authenticated user to modify files on the device and potentially escalate their privileges.

5

Is CVE-2021-1419 exploitable remotely?

No, CVE-2021-1419 is a local vulnerability and requires authentication to exploit.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203