cisco-sa-cisco-ap-LLjsGxv: Cisco Access Points SSH Management Privilege Escalation Vulnerability

Published Sep 22, 2021
·
Updated

A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-ap-LLjsGxv

Credit

Richard Atkin(ITGL)

Affected Software

2 affected componentsFixes available
Cisco Wireless LAN Controller Software>=8.5 and earlier, <=8.10, <8.10.151.0
8.10.151.0
Cisco Catalyst 9800 Wireless Controller Software>=17.2 and earlier, <=17.3, <17.3.3, =16.12, <16.12.6
17.3.316.12.6

Event History

Sep 22, 2021
Advisory Published
via Cisco·04:00 PM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

1

What is the vulnerability ID of this Cisco Access Points vulnerability?

The vulnerability ID of this Cisco Access Points vulnerability is cisco-sa-cisco-ap-LLjsGxv.

2

What is the severity rating of the Cisco Access Points vulnerability?

The severity rating of the Cisco Access Points vulnerability is 7.8 (high).

3

How does this vulnerability impact the affected devices?

This vulnerability allows a local, authenticated user to modify files on the affected device and potentially gain escalated privileges.

4

Which Cisco Access Point platforms are affected by this vulnerability?

This vulnerability affects multiple Cisco Access Point platforms, including Cisco Wireless LAN Controller Software and Cisco Catalyst 9800 Wireless Controller Software.

5

How can I fix this Cisco Access Points vulnerability?

To fix this vulnerability, upgrade to the recommended software version provided by Cisco.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203