cisco-sa-ap-foverwrt-HyVXvrtb

csafUScisco_csaf

Cisco Aironet Access Points Arbitrary File Overwrite Vulnerability

view advisory published 2021-03-24

A vulnerability in the implementation of a CLI command in Cisco Aironet Access Points (AP) could allow an authenticated, local attacker to overwrite files in the flash memory of the device. This vulnerability is due to insufficient input validation for a specific command. An attacker could exploit this vulnerability by issuing a command with crafted arguments. A successful exploit could allow the attacker to overwrite or create files with data that is already present in other files that are hosted on the affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-foverwrt-HyVXvrtb ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-foverwrt-HyVXvrtb"]

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2021-1423USmedium4.4—
A vulnerability in the implementation of a CLI command in Cisco Aironet Access Points (AP) could allow an authenticated, local attacker to overwrite files in the flash memory of th…
02

references

External citations — patches, advisories, analysis.

03

remediations (2)

  • FixedCisco Aironet Access Point Software

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Aironet Access Point Software (IOS XE Controller)

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan