CVE-2021-1419

High

Description

A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.

SeverityHigh
CVSS7.8
Exploit probability—
ProductCisco Aironet 1542d Firmware
PublishedSep 23, 2021
First seenSep 23, 2021

How to fix

Update
  • cisco wireless_lan_controller_software8.10.151.0 or later
  • cisco catalyst_9800_firmware16.12.6, 17.3.3 or later

Affected products

ProductAffected versionsFixed in
cisco aironet_1542d_firmwareNo range specified—
cisco aironet_1562d_firmwareNo range specified—
cisco aironet_1815m_firmwareNo range specified—
cisco aironet_1830e_firmwareNo range specified—
cisco aironet_1840i_firmwareNo range specified—
cisco aironet_1850e_firmwareNo range specified—
cisco aironet_2800i_firmwareNo range specified—
cisco aironet_3800p_firmwareNo range specified—
cisco aironet_4800_firmwareNo range specified—
cisco catalyst_9105axi_firmwareNo range specified—
cisco catalyst_9115axe_firmwareNo range specified—
cisco catalyst_9117_firmwareNo range specified—
cisco catalyst_9120axi_firmwareNo range specified—
cisco catalyst_9124axd_firmwareNo range specified—
cisco catalyst_9130axe_firmwareNo range specified—
cisco catalyst_iw6300_ac_firmwareNo range specified—
cisco esw6300_firmwareNo range specified—
cisco 1100-8p_firmwareNo range specified—
cisco 1120_firmwareNo range specified—
cisco 1160_firmwareNo range specified—
cisco wireless_lan_controller_software8.10 ≤ v < 8.10.151.08.10.151.0
cisco catalyst_9800_firmware16.12 ≤ v < 16.12.6, 17.3 ≤ v < 17.3.3, 17.416.12.6, 17.3.3
cisco aironet_1542i_firmwareNo range specified—
cisco aironet_1562e_firmwareNo range specified—
cisco aironet_1562i_firmwareNo range specified—
cisco aironet_1815w_firmwareNo range specified—
cisco aironet_1815t_firmwareNo range specified—
cisco aironet_1815i_firmwareNo range specified—
cisco aironet_1830i_firmwareNo range specified—
cisco aironet_1850i_firmwareNo range specified—
cisco aironet_2800e_firmwareNo range specified—
cisco aironet_3800i_firmwareNo range specified—
cisco aironet_3800e_firmwareNo range specified—
cisco catalyst_9105axw_firmwareNo range specified—
cisco catalyst_9115axi_firmwareNo range specified—
cisco catalyst_9120axp_firmwareNo range specified—
cisco catalyst_9120axe_firmwareNo range specified—
cisco catalyst_9124axi_firmwareNo range specified—
cisco catalyst_9130axi_firmwareNo range specified—
cisco catalyst_iw6300_dc_firmwareNo range specified—
cisco catalyst_iw6300_dcw_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.