cisco-sa-cisco-ap-LLjsGxv

csafUScisco_csaf

Cisco Access Points SSH Management Privilege Escalation Vulnerability

view advisory published 2021-09-22

A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2021-1419UShigh7.8—
A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and pos…
02

references

External citations — patches, advisories, analysis.

03

remediations (81)

  • FixedCisco Aironet Access Point Software (IOS XE Controller)

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.105.0 when installed on Cisco 3500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.105.0 when installed on Cisco 5500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.105.0 when installed on Cisco 8500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.105.0 when installed on Cisco Virtual Wireless Controller

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.112.0 when installed on Cisco 3500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.112.0 when installed on Cisco 5500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.112.0 when installed on Cisco 8500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.112.0 when installed on Cisco Virtual Wireless Controller

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.113.0 when installed on Cisco 3500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.113.0 when installed on Cisco 5500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.113.0 when installed on Cisco 8500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.113.0 when installed on Cisco Virtual Wireless Controller

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.120.0 when installed on Cisco 3500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.120.0 when installed on Cisco 5500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.120.0 when installed on Cisco 8500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.120.0 when installed on Cisco Virtual Wireless Controller

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.121.0 when installed on Cisco 3500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.121.0 when installed on Cisco 5500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.121.0 when installed on Cisco 8500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.121.0 when installed on Cisco Virtual Wireless Controller

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.122.0 when installed on Cisco 3500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.122.0 when installed on Cisco 5500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.122.0 when installed on Cisco 8500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.122.0 when installed on Cisco Virtual Wireless Controller

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.130.0 when installed on Cisco 3500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.130.0 when installed on Cisco 5500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.130.0 when installed on Cisco 8500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.130.0 when installed on Cisco Virtual Wireless Controller

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.141.0 when installed on Cisco 3500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.141.0 when installed on Cisco 5500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.141.0 when installed on Cisco 8500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.141.0 when installed on Cisco Virtual Wireless Controller

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.142.0 when installed on Cisco 3500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.142.0 when installed on Cisco 5500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.142.0 when installed on Cisco 8500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.142.0 when installed on Cisco Virtual Wireless Controller

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.150.0 when installed on Cisco 3500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.150.0 when installed on Cisco 5500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.150.0 when installed on Cisco 8500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.10.150.0 when installed on Cisco Virtual Wireless Controller

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.6.101.0 when installed on Cisco 3500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.6.101.0 when installed on Cisco 5500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.6.101.0 when installed on Cisco 8500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.6.101.0 when installed on Cisco Virtual Wireless Controller

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.7.102.0 when installed on Cisco 3500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.7.102.0 when installed on Cisco 5500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.7.102.0 when installed on Cisco 8500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.7.102.0 when installed on Cisco Virtual Wireless Controller

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.7.106.0 when installed on Cisco 3500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.7.106.0 when installed on Cisco 5500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.7.106.0 when installed on Cisco 8500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.7.106.0 when installed on Cisco Virtual Wireless Controller

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.8.100.0 when installed on Cisco 3500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.8.100.0 when installed on Cisco 5500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.8.100.0 when installed on Cisco 8500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.8.100.0 when installed on Cisco Virtual Wireless Controller

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.8.111.0 when installed on Cisco 3500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.8.111.0 when installed on Cisco 5500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.8.111.0 when installed on Cisco 8500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.8.111.0 when installed on Cisco Virtual Wireless Controller

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.8.120.0 when installed on Cisco 3500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.8.120.0 when installed on Cisco 5500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.8.120.0 when installed on Cisco 8500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.8.120.0 when installed on Cisco Virtual Wireless Controller

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.8.125.0 when installed on Cisco 3500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.8.125.0 when installed on Cisco 5500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.8.125.0 when installed on Cisco 8500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.8.125.0 when installed on Cisco Virtual Wireless Controller

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.8.130.0 when installed on Cisco 3500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.8.130.0 when installed on Cisco 5500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.8.130.0 when installed on Cisco 8500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.8.130.0 when installed on Cisco Virtual Wireless Controller

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.9.100.0 when installed on Cisco 3500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.9.100.0 when installed on Cisco 5500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.9.100.0 when installed on Cisco 8500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.9.100.0 when installed on Cisco Virtual Wireless Controller

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.9.111.0 when installed on Cisco 3500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.9.111.0 when installed on Cisco 5500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.9.111.0 when installed on Cisco 8500 Series Wireless Controllers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Wireless LAN Controller (WLC) 8.9.111.0 when installed on Cisco Virtual Wireless Controller

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan