CVE-2021-1419 (CNNVD-202109-1551)
HIGH
中文标题:
Cisco Access Points 安全漏洞
英文标题:
Cisco Access Points SSH Management Privilege Escalation Vulnerability
CVSS分数:
7.8
发布时间:
2021-09-23 02:30:23
漏洞类型:
其他
状态:
PUBLISHED
数据质量分数:
0.30
数据版本:
v3
漏洞描述
中文描述:
Cisco Access Points是美国思科（Cisco）公司的一款网络接入点设备。 Cisco Access Points platforms 存在安全漏洞，该漏洞源于SSH管理界面对文件操作检查不正确造成的。攻击者可利用该漏洞允许本地经过身份验证的用户修改受影响设备上的文件，并可能获得升级的特权。
英文描述:
A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.
CWE类型:
CWE-284
标签:
（暂无数据）
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco Wireless LAN Controller (WLC) | n/a | - | - |
cpe:2.3:a:cisco:cisco_wireless_lan_controller_(wlc):n_a:*:*:*:*:*:*:*
|
| cisco | aironet_1542d_firmware | - | - | - |
cpe:2.3:o:cisco:aironet_1542d_firmware:-:*:*:*:*:*:*:*
|
| cisco | aironet_1562d_firmware | - | - | - |
cpe:2.3:o:cisco:aironet_1562d_firmware:-:*:*:*:*:*:*:*
|
| cisco | aironet_1815m_firmware | - | - | - |
cpe:2.3:o:cisco:aironet_1815m_firmware:-:*:*:*:*:*:*:*
|
| cisco | aironet_1830e_firmware | - | - | - |
cpe:2.3:o:cisco:aironet_1830e_firmware:-:*:*:*:*:*:*:*
|
| cisco | aironet_1840i_firmware | - | - | - |
cpe:2.3:o:cisco:aironet_1840i_firmware:-:*:*:*:*:*:*:*
|
| cisco | aironet_1850e_firmware | - | - | - |
cpe:2.3:o:cisco:aironet_1850e_firmware:-:*:*:*:*:*:*:*
|
| cisco | aironet_2800i_firmware | - | - | - |
cpe:2.3:o:cisco:aironet_2800i_firmware:-:*:*:*:*:*:*:*
|
| cisco | aironet_3800p_firmware | - | - | - |
cpe:2.3:o:cisco:aironet_3800p_firmware:-:*:*:*:*:*:*:*
|
| cisco | aironet_4800_firmware | - | - | - |
cpe:2.3:o:cisco:aironet_4800_firmware:-:*:*:*:*:*:*:*
|
| cisco | catalyst_9105axi_firmware | - | - | - |
cpe:2.3:o:cisco:catalyst_9105axi_firmware:-:*:*:*:*:*:*:*
|
| cisco | catalyst_9115axe_firmware | - | - | - |
cpe:2.3:o:cisco:catalyst_9115axe_firmware:-:*:*:*:*:*:*:*
|
| cisco | catalyst_9117_firmware | - | - | - |
cpe:2.3:o:cisco:catalyst_9117_firmware:-:*:*:*:*:*:*:*
|
| cisco | catalyst_9120axi_firmware | - | - | - |
cpe:2.3:o:cisco:catalyst_9120axi_firmware:-:*:*:*:*:*:*:*
|
| cisco | catalyst_9124axd_firmware | - | - | - |
cpe:2.3:o:cisco:catalyst_9124axd_firmware:-:*:*:*:*:*:*:*
|
| cisco | catalyst_9130axe_firmware | - | - | - |
cpe:2.3:o:cisco:catalyst_9130axe_firmware:-:*:*:*:*:*:*:*
|
| cisco | catalyst_iw6300_ac_firmware | - | - | - |
cpe:2.3:o:cisco:catalyst_iw6300_ac_firmware:-:*:*:*:*:*:*:*
|
| cisco | esw6300_firmware | - | - | - |
cpe:2.3:o:cisco:esw6300_firmware:-:*:*:*:*:*:*:*
|
| cisco | 1100-8p_firmware | - | - | - |
cpe:2.3:o:cisco:1100-8p_firmware:-:*:*:*:*:*:*:*
|
| cisco | 1120_firmware | - | - | - |
cpe:2.3:o:cisco:1120_firmware:-:*:*:*:*:*:*:*
|
| cisco | 1160_firmware | - | - | - |
cpe:2.3:o:cisco:1160_firmware:-:*:*:*:*:*:*:*
|
| cisco | wireless_lan_controller_software | * | - | - |
cpe:2.3:a:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*
|
| cisco | catalyst_9800_firmware | * | - | - |
cpe:2.3:o:cisco:catalyst_9800_firmware:*:*:*:*:*:*:*:*
|
| cisco | catalyst_9800_firmware | 17.4 | - | - |
cpe:2.3:o:cisco:catalyst_9800_firmware:17.4:*:*:*:*:*:*:*
|
| cisco | aironet_1542i_firmware | - | - | - |
cpe:2.3:o:cisco:aironet_1542i_firmware:-:*:*:*:*:*:*:*
|
| cisco | aironet_1562e_firmware | - | - | - |
cpe:2.3:o:cisco:aironet_1562e_firmware:-:*:*:*:*:*:*:*
|
| cisco | aironet_1562i_firmware | - | - | - |
cpe:2.3:o:cisco:aironet_1562i_firmware:-:*:*:*:*:*:*:*
|
| cisco | aironet_1815w_firmware | - | - | - |
cpe:2.3:o:cisco:aironet_1815w_firmware:-:*:*:*:*:*:*:*
|
| cisco | aironet_1815t_firmware | - | - | - |
cpe:2.3:o:cisco:aironet_1815t_firmware:-:*:*:*:*:*:*:*
|
| cisco | aironet_1815i_firmware | - | - | - |
cpe:2.3:o:cisco:aironet_1815i_firmware:-:*:*:*:*:*:*:*
|
| cisco | aironet_1830i_firmware | - | - | - |
cpe:2.3:o:cisco:aironet_1830i_firmware:-:*:*:*:*:*:*:*
|
| cisco | aironet_1850i_firmware | - | - | - |
cpe:2.3:o:cisco:aironet_1850i_firmware:-:*:*:*:*:*:*:*
|
| cisco | aironet_2800e_firmware | - | - | - |
cpe:2.3:o:cisco:aironet_2800e_firmware:-:*:*:*:*:*:*:*
|
| cisco | aironet_3800i_firmware | - | - | - |
cpe:2.3:o:cisco:aironet_3800i_firmware:-:*:*:*:*:*:*:*
|
| cisco | aironet_3800e_firmware | - | - | - |
cpe:2.3:o:cisco:aironet_3800e_firmware:-:*:*:*:*:*:*:*
|
| cisco | catalyst_9105axw_firmware | - | - | - |
cpe:2.3:o:cisco:catalyst_9105axw_firmware:-:*:*:*:*:*:*:*
|
| cisco | catalyst_9115axi_firmware | - | - | - |
cpe:2.3:o:cisco:catalyst_9115axi_firmware:-:*:*:*:*:*:*:*
|
| cisco | catalyst_9120axp_firmware | - | - | - |
cpe:2.3:o:cisco:catalyst_9120axp_firmware:-:*:*:*:*:*:*:*
|
| cisco | catalyst_9120axe_firmware | - | - | - |
cpe:2.3:o:cisco:catalyst_9120axe_firmware:-:*:*:*:*:*:*:*
|
| cisco | catalyst_9124axi_firmware | - | - | - |
cpe:2.3:o:cisco:catalyst_9124axi_firmware:-:*:*:*:*:*:*:*
|
| cisco | catalyst_9130axi_firmware | - | - | - |
cpe:2.3:o:cisco:catalyst_9130axi_firmware:-:*:*:*:*:*:*:*
|
| cisco | catalyst_iw6300_dc_firmware | - | - | - |
cpe:2.3:o:cisco:catalyst_iw6300_dc_firmware:-:*:*:*:*:*:*:*
|
| cisco | catalyst_iw6300_dcw_firmware | - | - | - |
cpe:2.3:o:cisco:catalyst_iw6300_dcw_firmware:-:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
（暂无数据）
英文解决方案:
（暂无数据）
临时解决方案:
（暂无数据）
参考链接
20210922 Cisco Access Points SSH Management Privilege Escalation Vulnerability
vendor-advisory
cve.org
访问
cve.org
CVSS评分详情
3.1 (cna)
HIGH
7.8
CVSS向量:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
机密性
HIGH
完整性
HIGH
可用性
HIGH
时间信息
发布时间:
2021-09-23 02:30:23
修改时间:
2024-11-07 21:52:19
创建时间:
2025-11-11 15:36:33
更新时间:
2025-11-11 15:56:54
利用信息
暂无可利用代码信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2021-1419 |
2025-11-11 15:20:45 | 2025-11-11 07:36:33 |
| NVD | nvd_CVE-2021-1419 |
2025-11-11 14:57:42 | 2025-11-11 07:44:55 |
| CNNVD | cnnvd_CNNVD-202109-1551 |
2025-11-11 15:10:43 | 2025-11-11 07:56:54 |
版本与语言
当前版本:
v3
主要语言:
EN
支持语言:
EN
ZH
安全公告
暂无安全公告信息
变更历史
v3
CNNVD
2025-11-11 15:56:54
vulnerability_type: 未提取 → 其他; cnnvd_id: 未提取 → CNNVD-202109-1551; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202109-1551
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
v2
NVD
2025-11-11 15:44:55
affected_products_count: 1 → 43; data_sources: ['cve'] → ['cve', 'nvd']
查看详细变更
- affected_products_count: 1 -> 43
- data_sources: ['cve'] -> ['cve', 'nvd']