CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2021-1419
High (7.8) in cisco. EPSS 0.2% chance of exploitation in the next 30 days.
A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
- CWE
- CWE-284
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cisco:1100-8p_firmware
- cisco:1120_firmware
- cisco:1160_firmware
- cisco:aironet_1542d_firmware
- cisco:aironet_1542i_firmware
- cisco:aironet_1562d_firmware
- cisco:aironet_1562e_firmware
- cisco:aironet_1562i_firmware
- cisco:aironet_1815i_firmware
- cisco:aironet_1815m_firmware
- cisco:aironet_1815t_firmware
- cisco:aironet_1815w_firmware
- cisco:aironet_1830e_firmware
- cisco:aironet_1830i_firmware
- cisco:aironet_1840i_firmware
- cisco:aironet_1850e_firmware
- cisco:aironet_1850i_firmware
- cisco:aironet_2800e_firmware
- cisco:aironet_2800i_firmware
- cisco:aironet_3800e_firmware
- cisco:aironet_3800i_firmware
- cisco:aironet_3800p_firmware
- cisco:aironet_4800_firmware
- cisco:catalyst_9105axi_firmware
- cisco:catalyst_9105axw_firmware
- cisco:catalyst_9115axe_firmware
- cisco:catalyst_9115axi_firmware
- cisco:catalyst_9117_firmware
- cisco:catalyst_9120axe_firmware
- cisco:catalyst_9120axi_firmware
- cisco:catalyst_9120axp_firmware
- cisco:catalyst_9124axd_firmware
- cisco:catalyst_9124axi_firmware
- cisco:catalyst_9130axe_firmware
- cisco:catalyst_9130axi_firmware
- cisco:catalyst_9800_firmware
- cisco:catalyst_iw6300_ac_firmware
- cisco:catalyst_iw6300_dc_firmware
- cisco:catalyst_iw6300_dcw_firmware
- cisco:esw6300_firmware
- cisco:wireless_lan_controller_software