CVE-2021-1419CWE-284

Cisco Access Points SSH Management Privilege Escalation Vulnerability

High · published September 23, 2021

CVSS v3.1
7.8
EPSS
0%
Percentile
11.5
In the wild
Unconfirmed
What it is

A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00216 · 11.5th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-09-23T02:30Z
EPSS history
Timeline
  • 23 SEP 02:30Z
    Cisco Access Points SSH Management Privilege Escalation Vulnerability
    cvelistv5