CVE-2021-1419
published 2021-09-23CVE-2021-1419: A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the…
PriorityP342high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.22%
12.1th percentile
A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | access_points_ssh_management | — | — |
| cisco | catalyst_9800_firmware | — | — |
| cisco | catalyst_9800_firmware | >= 16.12 < 16.12.6 | 16.12.6 |
| cisco | catalyst_9800_firmware | >= 17.3 < 17.3.3 | 17.3.3 |
| cisco | cisco_wireless_lan_controller | — | — |
| cisco | wireless_lan_controller_software | >= 8.10 < 8.10.151.0 | 8.10.151.0 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Access Points SSH Management Privilege Escalation Vulnerability
vendor_cisco·2021-09-22·CVSS 7.8
CVE-2021-1419 [HIGH] CWE-284 Cisco Access Points SSH Management Privilege Escalation Vulnerability
Cisco Access Points SSH Management Privilege Escalation Vulnerability
A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges.
The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following
Cisco
Cisco Access Points SSH Management Privilege Escalation Vulnerability
vendor_cisco·CVSS 3.1
CVE-2021-1419 Cisco Access Points SSH Management Privilege Escalation Vulnerability
CVE-2021-1419: Cisco Access Points SSH Management Privilege Escalation Vulnerability
A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user. Cisco has released software updates that address this vulnerability. There are no
CVSS: 3.1
CWE: CWE-284, CWE-284
Bug IDs: CSCvw71885
GHSA
GHSA-j2cc-65xj-fpxh: A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files
ghsa_unreviewed·2022-05-24
CVE-2021-1419 [HIGH] CWE-269 GHSA-j2cc-65xj-fpxh: A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files
A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-09-23
Published