cisco-sa-cisco-ap-LLjsGxv: Cisco Access Points SSH Management Privilege Escalation Vulnerability
A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-ap-LLjsGxv
Credit
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this Cisco Access Points vulnerability?
The vulnerability ID of this Cisco Access Points vulnerability is cisco-sa-cisco-ap-LLjsGxv.
What is the severity rating of the Cisco Access Points vulnerability?
The severity rating of the Cisco Access Points vulnerability is 7.8 (high).
How does this vulnerability impact the affected devices?
This vulnerability allows a local, authenticated user to modify files on the affected device and potentially gain escalated privileges.
Which Cisco Access Point platforms are affected by this vulnerability?
This vulnerability affects multiple Cisco Access Point platforms, including Cisco Wireless LAN Controller Software and Cisco Catalyst 9800 Wireless Controller Software.
How can I fix this Cisco Access Points vulnerability?
To fix this vulnerability, upgrade to the recommended software version provided by Cisco.