CVE-2021-1449 (CNNVD-202103-1385)
中文标题:
Cisco Access Point 安全漏洞
英文标题:
Cisco Access Point Software Arbitrary Code Execution Vulnerability
漏洞描述
中文描述:
Cisco Access Point是美国思科（Cisco）公司的一款网络接入点设备。为小型办公室提供高密度无线连接。 Cisco Access Points Software 存在安全漏洞，攻击者可利用该漏洞在启动时执行无签名代码。
英文描述:
A vulnerability in the boot logic of Cisco Access Points Software could allow an authenticated, local attacker to execute unsigned code at boot time. The vulnerability is due to an improper check that is performed by the area of code that manages system startup processes. An attacker could exploit this vulnerability by modifying a specific file that is stored on the system, which would allow the attacker to bypass existing protections. A successful exploit could allow the attacker to execute unsigned code at boot time and bypass the software image verification check part of the secure boot process of an affected device. Note: To exploit this vulnerability, the attacker would need to have access to the development shell (devshell) on the device.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco Aironet Access Point Software | n/a | - | - |
cpe:2.3:a:cisco:cisco_aironet_access_point_software:n_a:*:*:*:*:*:*:*
|
| cisco | aironet_access_point_software | - | - | - |
cpe:2.3:a:cisco:aironet_access_point_software:-:*:*:*:*:*:*:*
|
| cisco | catalyst_9800_firmware | * | - | - |
cpe:2.3:o:cisco:catalyst_9800_firmware:*:*:*:*:*:*:*:*
|
| cisco | wireless_lan_controller_software | * | - | - |
cpe:2.3:a:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
CVSS评分详情
3.1 (cna)
MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2021-1449 |
2025-11-11 15:20:45 | 2025-11-11 07:36:33 |
| NVD | nvd_CVE-2021-1449 |
2025-11-11 14:57:35 | 2025-11-11 07:44:55 |
| CNNVD | cnnvd_CNNVD-202103-1385 |
2025-11-11 15:10:36 | 2025-11-11 07:56:39 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202103-1385
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 1 -> 4
- data_sources: ['cve'] -> ['cve', 'nvd']