cisco-sa-cisco-ap-LLjsGxv: Cisco Access Points SSH Management Privilege Escalation Vulnerability
First published: Wed Sep 22 2021(Updated: )
A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-ap-LLjsGxv
Credit: Richard Atkin ITGL
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Wireless LAN Controller Software | >=8.5 and earlier<=8.10<8.10.151.0 | 8.10.151.0 |
| Cisco Catalyst 9800 Wireless Controller Software | >=17.2 and earlier<=17.3<17.3.3=16.12<16.12.6 | 17.3.3 16.12.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this Cisco Access Points vulnerability?
The vulnerability ID of this Cisco Access Points vulnerability is cisco-sa-cisco-ap-LLjsGxv.
What is the severity rating of the Cisco Access Points vulnerability?
The severity rating of the Cisco Access Points vulnerability is 7.8 (high).
How does this vulnerability impact the affected devices?
This vulnerability allows a local, authenticated user to modify files on the affected device and potentially gain escalated privileges.
Which Cisco Access Point platforms are affected by this vulnerability?
This vulnerability affects multiple Cisco Access Point platforms, including Cisco Wireless LAN Controller Software and Cisco Catalyst 9800 Wireless Controller Software.
How can I fix this Cisco Access Points vulnerability?
To fix this vulnerability, upgrade to the recommended software version provided by Cisco.
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/title
- agent/event
- agent/description
- agent/tags
- vendor/cisco
- canonical/cisco wireless lan controller software
- version/cisco wireless lan controller software/8.5 and earlier
- version/cisco wireless lan controller software/8.10
- canonical/cisco catalyst 9800 wireless controller software
- version/cisco catalyst 9800 wireless controller software/17.2 and earlier
- version/cisco catalyst 9800 wireless controller software/17.3
- version/cisco catalyst 9800 wireless controller software/16.12