CVE-2021-1419

CWE-284 — Improper Access ControlCWE-269 — Improper Privilege Management4 documents4 sources
Severity
7.8HIGH
EPSS
0.0%
top 89.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Cisco Catalyst 9800 FirmwareCisco Wireless LAN Controller SoftwareCisco Cisco Wireless LAN Controller (wlc)
Timeline
PublishedSep 23
Latest updateMay 24

Description

A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

▶NVDcisco/catalyst_9800_firmware16.12 — 16.12.6+2

Patches

Patch: tools.cisco.com ↗Patch: tools.cisco.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-j2cc-65xj-fpxh: A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files↗2022-05-24
▶
CVEList
Cisco Access Points SSH Management Privilege Escalation Vulnerability↗2021-09-23
▶

📋Vendor Advisories

1
Cisco
Cisco Access Points SSH Management Privilege Escalation Vulnerability↗2021-09-22
▶
CVE-2021-1419 (HIGH CVSS 7.8) | A vulnerability in the SSH manageme | cvebase.io