CVE-2021-1401CWE-269

Cisco Small Business 100, 300, and 500 Series Wireless Access Points Vulnerabilities

High · published May 6, 2021

CVSS v3.1
8.8
EPSS
2%
Percentile
80.9
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to obtain sensitive information from or inject arbitrary commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02034 · 80.9th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2021-05-06T12:42Z
EPSS history
Timeline
  • 06 MAY 12:42Z
    Cisco Small Business 100, 300, and 500 Series Wireless Access Points Vulnerabilities
    cvelistv5