CVE-2021-1419
Description
A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.
How to fix
- cisco wireless_lan_controller_software8.10.151.0 or later
- cisco catalyst_9800_firmware16.12.6, 17.3.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco aironet_1542d_firmware | No range specified | — |
| cisco aironet_1562d_firmware | No range specified | — |
| cisco aironet_1815m_firmware | No range specified | — |
| cisco aironet_1830e_firmware | No range specified | — |
| cisco aironet_1840i_firmware | No range specified | — |
| cisco aironet_1850e_firmware | No range specified | — |
| cisco aironet_2800i_firmware | No range specified | — |
| cisco aironet_3800p_firmware | No range specified | — |
| cisco aironet_4800_firmware | No range specified | — |
| cisco catalyst_9105axi_firmware | No range specified | — |
| cisco catalyst_9115axe_firmware | No range specified | — |
| cisco catalyst_9117_firmware | No range specified | — |
| cisco catalyst_9120axi_firmware | No range specified | — |
| cisco catalyst_9124axd_firmware | No range specified | — |
| cisco catalyst_9130axe_firmware | No range specified | — |
| cisco catalyst_iw6300_ac_firmware | No range specified | — |
| cisco esw6300_firmware | No range specified | — |
| cisco 1100-8p_firmware | No range specified | — |
| cisco 1120_firmware | No range specified | — |
| cisco 1160_firmware | No range specified | — |
| cisco wireless_lan_controller_software | 8.10 ≤ v < 8.10.151.0 | 8.10.151.0 |
| cisco catalyst_9800_firmware | 16.12 ≤ v < 16.12.6, 17.3 ≤ v < 17.3.3, 17.4 | 16.12.6, 17.3.3 |
| cisco aironet_1542i_firmware | No range specified | — |
| cisco aironet_1562e_firmware | No range specified | — |
| cisco aironet_1562i_firmware | No range specified | — |
| cisco aironet_1815w_firmware | No range specified | — |
| cisco aironet_1815t_firmware | No range specified | — |
| cisco aironet_1815i_firmware | No range specified | — |
| cisco aironet_1830i_firmware | No range specified | — |
| cisco aironet_1850i_firmware | No range specified | — |
| cisco aironet_2800e_firmware | No range specified | — |
| cisco aironet_3800i_firmware | No range specified | — |
| cisco aironet_3800e_firmware | No range specified | — |
| cisco catalyst_9105axw_firmware | No range specified | — |
| cisco catalyst_9115axi_firmware | No range specified | — |
| cisco catalyst_9120axp_firmware | No range specified | — |
| cisco catalyst_9120axe_firmware | No range specified | — |
| cisco catalyst_9124axi_firmware | No range specified | — |
| cisco catalyst_9130axi_firmware | No range specified | — |
| cisco catalyst_iw6300_dc_firmware | No range specified | — |
| cisco catalyst_iw6300_dcw_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.