CVE-2021-1419
Cisco Access Points SSH Management Privilege Escalation Vulnerability
Severity Score
7.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track*
*SSVC
Descriptions
A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.
Una vulnerabilidad en la función de administración SSH de varias plataformas Cisco Access Points (APs), podría permitir a un usuario local autenticado modificar archivos en el dispositivo afectado y posiblemente alcanzar privilegios escalados. La vulnerabilidad es debido a una comprobación inapropiada de las operaciones con archivos en la interfaz de administración SSH. Un usuario administrador de red podría explotar esta vulnerabilidad al acceder a un dispositivo afectado mediante la administración SSH para realizar un cambio de configuración. Una explotación con éxito podría permitir al atacante alcanzar privilegios equivalentes a los del usuario root
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track*
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-11-13 CVE Reserved
- 2021-09-23 CVE Published
- 2023-03-08 EPSS Updated
- 2024-11-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-284: Improper Access Control
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-ap-LLjsGxv | 2023-11-07 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Aironet 1542d Firmware Search vendor "Cisco" for product "Aironet 1542d Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Aironet 1542d Search vendor "Cisco" for product "Aironet 1542d" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Aironet 1562d Firmware Search vendor "Cisco" for product "Aironet 1562d Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Aironet 1562d Search vendor "Cisco" for product "Aironet 1562d" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Aironet 1815m Firmware Search vendor "Cisco" for product "Aironet 1815m Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Aironet 1815m Search vendor "Cisco" for product "Aironet 1815m" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Aironet 1830e Firmware Search vendor "Cisco" for product "Aironet 1830e Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Aironet 1830e Search vendor "Cisco" for product "Aironet 1830e" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Aironet 1840i Firmware Search vendor "Cisco" for product "Aironet 1840i Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Aironet 1840i Search vendor "Cisco" for product "Aironet 1840i" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Aironet 1850e Firmware Search vendor "Cisco" for product "Aironet 1850e Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Aironet 1850e Search vendor "Cisco" for product "Aironet 1850e" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Aironet 2800i Firmware Search vendor "Cisco" for product "Aironet 2800i Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Aironet 2800i Search vendor "Cisco" for product "Aironet 2800i" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Aironet 3800p Firmware Search vendor "Cisco" for product "Aironet 3800p Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Aironet 3800p Search vendor "Cisco" for product "Aironet 3800p" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Aironet 4800 Firmware Search vendor "Cisco" for product "Aironet 4800 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Aironet 4800 Search vendor "Cisco" for product "Aironet 4800" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9105axi Firmware Search vendor "Cisco" for product "Catalyst 9105axi Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9105axi Search vendor "Cisco" for product "Catalyst 9105axi" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9115axe Firmware Search vendor "Cisco" for product "Catalyst 9115axe Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9115axe Search vendor "Cisco" for product "Catalyst 9115axe" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9117 Firmware Search vendor "Cisco" for product "Catalyst 9117 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9117axi Search vendor "Cisco" for product "Catalyst 9117axi" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9120axi Firmware Search vendor "Cisco" for product "Catalyst 9120axi Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9120axi Search vendor "Cisco" for product "Catalyst 9120axi" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9124axd Firmware Search vendor "Cisco" for product "Catalyst 9124axd Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9124axd Search vendor "Cisco" for product "Catalyst 9124axd" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9130axe Firmware Search vendor "Cisco" for product "Catalyst 9130axe Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9130axe Search vendor "Cisco" for product "Catalyst 9130axe" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst Iw6300 Ac Firmware Search vendor "Cisco" for product "Catalyst Iw6300 Ac Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst Iw6300 Ac Search vendor "Cisco" for product "Catalyst Iw6300 Ac" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Esw6300 Firmware Search vendor "Cisco" for product "Esw6300 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Esw6300 Search vendor "Cisco" for product "Esw6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | 1100-8p Firmware Search vendor "Cisco" for product "1100-8p Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | 1100-8p Search vendor "Cisco" for product "1100-8p" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | 1120 Firmware Search vendor "Cisco" for product "1120 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | 1120 Search vendor "Cisco" for product "1120" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | 1160 Firmware Search vendor "Cisco" for product "1160 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | 1160 Integrated Services Router Search vendor "Cisco" for product "1160 Integrated Services Router" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9800 Firmware Search vendor "Cisco" for product "Catalyst 9800 Firmware" | >= 16.12 < 16.12.6 Search vendor "Cisco" for product "Catalyst 9800 Firmware" and version " >= 16.12 < 16.12.6" | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9800-l Search vendor "Cisco" for product "Catalyst 9800-l" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9800 Firmware Search vendor "Cisco" for product "Catalyst 9800 Firmware" | >= 17.3 < 17.3.3 Search vendor "Cisco" for product "Catalyst 9800 Firmware" and version " >= 17.3 < 17.3.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9800-l Search vendor "Cisco" for product "Catalyst 9800-l" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9800 Firmware Search vendor "Cisco" for product "Catalyst 9800 Firmware" | 17.4 Search vendor "Cisco" for product "Catalyst 9800 Firmware" and version "17.4" | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9800-l Search vendor "Cisco" for product "Catalyst 9800-l" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Aironet 1542i Firmware Search vendor "Cisco" for product "Aironet 1542i Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Aironet 1542i Search vendor "Cisco" for product "Aironet 1542i" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9800 Firmware Search vendor "Cisco" for product "Catalyst 9800 Firmware" | >= 16.12 < 16.12.6 Search vendor "Cisco" for product "Catalyst 9800 Firmware" and version " >= 16.12 < 16.12.6" | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9800-cl Search vendor "Cisco" for product "Catalyst 9800-cl" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9800 Firmware Search vendor "Cisco" for product "Catalyst 9800 Firmware" | >= 17.3 < 17.3.3 Search vendor "Cisco" for product "Catalyst 9800 Firmware" and version " >= 17.3 < 17.3.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9800-cl Search vendor "Cisco" for product "Catalyst 9800-cl" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9800 Firmware Search vendor "Cisco" for product "Catalyst 9800 Firmware" | 17.4 Search vendor "Cisco" for product "Catalyst 9800 Firmware" and version "17.4" | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9800-cl Search vendor "Cisco" for product "Catalyst 9800-cl" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9800 Firmware Search vendor "Cisco" for product "Catalyst 9800 Firmware" | >= 16.12 < 16.12.6 Search vendor "Cisco" for product "Catalyst 9800 Firmware" and version " >= 16.12 < 16.12.6" | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9800-40 Search vendor "Cisco" for product "Catalyst 9800-40" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9800 Firmware Search vendor "Cisco" for product "Catalyst 9800 Firmware" | >= 17.3 < 17.3.3 Search vendor "Cisco" for product "Catalyst 9800 Firmware" and version " >= 17.3 < 17.3.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9800-40 Search vendor "Cisco" for product "Catalyst 9800-40" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9800 Firmware Search vendor "Cisco" for product "Catalyst 9800 Firmware" | 17.4 Search vendor "Cisco" for product "Catalyst 9800 Firmware" and version "17.4" | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9800-40 Search vendor "Cisco" for product "Catalyst 9800-40" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9800 Firmware Search vendor "Cisco" for product "Catalyst 9800 Firmware" | >= 16.12 < 16.12.6 Search vendor "Cisco" for product "Catalyst 9800 Firmware" and version " >= 16.12 < 16.12.6" | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9800-80 Search vendor "Cisco" for product "Catalyst 9800-80" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9800 Firmware Search vendor "Cisco" for product "Catalyst 9800 Firmware" | >= 17.3 < 17.3.3 Search vendor "Cisco" for product "Catalyst 9800 Firmware" and version " >= 17.3 < 17.3.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9800-80 Search vendor "Cisco" for product "Catalyst 9800-80" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9800 Firmware Search vendor "Cisco" for product "Catalyst 9800 Firmware" | 17.4 Search vendor "Cisco" for product "Catalyst 9800 Firmware" and version "17.4" | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9800-80 Search vendor "Cisco" for product "Catalyst 9800-80" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Aironet 1562e Firmware Search vendor "Cisco" for product "Aironet 1562e Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Aironet 1562e Search vendor "Cisco" for product "Aironet 1562e" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Aironet 1562i Firmware Search vendor "Cisco" for product "Aironet 1562i Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Aironet 1562i Search vendor "Cisco" for product "Aironet 1562i" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Aironet 1815w Firmware Search vendor "Cisco" for product "Aironet 1815w Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Aironet 1815w Search vendor "Cisco" for product "Aironet 1815w" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Aironet 1815t Firmware Search vendor "Cisco" for product "Aironet 1815t Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Aironet 1815t Search vendor "Cisco" for product "Aironet 1815t" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Aironet 1815i Firmware Search vendor "Cisco" for product "Aironet 1815i Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Aironet 1815i Search vendor "Cisco" for product "Aironet 1815i" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Aironet 1830i Firmware Search vendor "Cisco" for product "Aironet 1830i Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Aironet 1830i Search vendor "Cisco" for product "Aironet 1830i" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Aironet 1850i Firmware Search vendor "Cisco" for product "Aironet 1850i Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Aironet 1850i Search vendor "Cisco" for product "Aironet 1850i" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Aironet 2800e Firmware Search vendor "Cisco" for product "Aironet 2800e Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Aironet 2800e Search vendor "Cisco" for product "Aironet 2800e" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Aironet 3800i Firmware Search vendor "Cisco" for product "Aironet 3800i Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Aironet 3800i Search vendor "Cisco" for product "Aironet 3800i" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Aironet 3800e Firmware Search vendor "Cisco" for product "Aironet 3800e Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Aironet 3800e Search vendor "Cisco" for product "Aironet 3800e" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9105axw Firmware Search vendor "Cisco" for product "Catalyst 9105axw Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9105axw Search vendor "Cisco" for product "Catalyst 9105axw" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9115axi Firmware Search vendor "Cisco" for product "Catalyst 9115axi Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9115axi Search vendor "Cisco" for product "Catalyst 9115axi" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9120axp Firmware Search vendor "Cisco" for product "Catalyst 9120axp Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9120axp Search vendor "Cisco" for product "Catalyst 9120axp" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9120axe Firmware Search vendor "Cisco" for product "Catalyst 9120axe Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9120axe Search vendor "Cisco" for product "Catalyst 9120axe" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9124axi Firmware Search vendor "Cisco" for product "Catalyst 9124axi Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9124axi Search vendor "Cisco" for product "Catalyst 9124axi" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst 9130axi Firmware Search vendor "Cisco" for product "Catalyst 9130axi Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst 9130axi Search vendor "Cisco" for product "Catalyst 9130axi" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst Iw6300 Dc Firmware Search vendor "Cisco" for product "Catalyst Iw6300 Dc Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst Iw6300 Dc Search vendor "Cisco" for product "Catalyst Iw6300 Dc" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Catalyst Iw6300 Dcw Firmware Search vendor "Cisco" for product "Catalyst Iw6300 Dcw Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Catalyst Iw6300 Dcw Search vendor "Cisco" for product "Catalyst Iw6300 Dcw" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Wireless Lan Controller Software Search vendor "Cisco" for product "Wireless Lan Controller Software" | >= 8.10 < 8.10.151.0 Search vendor "Cisco" for product "Wireless Lan Controller Software" and version " >= 8.10 < 8.10.151.0" | - |
Affected
| ||||||