cisco-sa-sb-wap-multi-ZAfKGXhF: Cisco??Small Business 100, 300, and 500 Series Wireless Access Points Vulnerabilities

Published May 5, 2021
·
Updated

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to obtain sensitive information from or inject arbitrary commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-multi-ZAfKGXhF

Credit

Shuto Imai(LAC Co), Ltd., for reporting these vulnerabilities.

Affected Software

1 affected componentFixes available
Cisco Product=WAP581 Wireless-AC Dual Radio Wave 2 Access Point with 2.5GbE LAN, <CSCvw59999 CSCvw60000, =WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE, <CSCvw59995 CSCvw59997, =WAP150 Wireless-AC/N Dual Radio Access Point with PoE, <CSCvw59995 CSCvw59997, =WAP125 Wireless-AC Dual Band Desktop Access Point with PoE, <CSCvw59999 CSCvw60000
CSCvw59999 CSCvw60000CSCvw59995 CSCvw59997CSCvw59995 CSCvw59997CSCvw59999 CSCvw60000

Event History

May 5, 2021
Advisory Published
via Cisco·04:00 PM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

1

What is the severity of cisco-sa-sb-wap-multi-ZAfKGXhF?

The severity of the vulnerabilities in cisco-sa-sb-wap-multi-ZAfKGXhF is high as they could allow an attacker to obtain sensitive information or inject commands.

2

How do I fix cisco-sa-sb-wap-multi-ZAfKGXhF?

To fix cisco-sa-sb-wap-multi-ZAfKGXhF, you should apply the recommended firmware update provided by Cisco for the affected access points.

3

What are the affected devices in cisco-sa-sb-wap-multi-ZAfKGXhF?

Affected devices in cisco-sa-sb-wap-multi-ZAfKGXhF include Cisco Small Business 100, 300, and 500 Series Wireless Access Points.

4

Can cisco-sa-sb-wap-multi-ZAfKGXhF vulnerabilities be exploited remotely?

Yes, cisco-sa-sb-wap-multi-ZAfKGXhF vulnerabilities can be exploited by an authenticated, remote attacker.

5

What types of attacks are possible with cisco-sa-sb-wap-multi-ZAfKGXhF?

Potential attacks include unauthorized access to sensitive information and the ability to execute arbitrary commands on the device.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203