Cisco Aironet Access Points FlexConnect Upgrade Information Disclosure Vulnerability
A vulnerability in the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, remote attacker to obtain confidential information from an affected device. This vulnerability is due to an unrestricted Trivial File Transfer Protocol (TFTP) configuration. An attacker could exploit this vulnerability by sending a specific TFTP request to an affected device. A successful exploit could allow the attacker to download any file from the filesystem of the affected access point (AP). Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-1437US | high7.5 | — | ||
A vulnerability in the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, remote attacker to obtain confidential information… | ||||
references
External citations — patches, advisories, analysis.
- Cisco Aironet Access Points FlexConnect Upgrade Information Disclosure Vulnerabilityself
- cisco-sa-aironet-mdns-dos-E6KwYuMxexternal
- cisco-sa-ap-privesc-wEVfp8Udexternal
- Cisco Security Vulnerability Policyexternal
- considering software upgradesexternal
- https://www.cisco.com/c/en/us/products/end-user-license-agreement.htmlexternal
- https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.htmlexternal
- Cisco Security Advisories pageexternal
remediations (2)
- FixedCisco Aironet Access Point Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Aironet Access Point Software (IOS XE Controller)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan