Cisco Aironet Access Points FlexConnect Upgrade Information Disclosure Vulnerability
A vulnerability in the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, remote attacker to obtain confidential information from an affected device. This vulnerability is due to an unrestricted Trivial File Transfer Protocol (TFTP) configuration. An attacker could exploit this vulnerability by sending a specific TFTP request to an affected device. A successful exploit could allow the attacker to download any file from the filesystem of the affected access point (AP). Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-1437US | high7.5 | — | ||
A vulnerability in the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, remote attacker to obtain confidential information… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cisco Aironet Access Points FlexConnect Upgrade Information Disclosure Vulnerabilityself
- cisco-sa-aironet-mdns-dos-E6KwYuMxexternal
- cisco-sa-ap-privesc-wEVfp8Udexternal
- Cisco Security Vulnerability Policyexternal
- considering software upgradesexternal
- https://www.cisco.com/c/en/us/products/end-user-license-agreement.htmlexternal
- https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.htmlexternal
- Cisco Security Advisories pageexternal
Behebungen (2)
- BehobenCisco Aironet Access Point Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Aironet Access Point Software (IOS XE Controller)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan