Lucene search

K

CiscoCISCO-SA-CISCO-AP-LLJSGXV

HistorySep 22, 2021 - 4:00 p.m.

Cisco Access Points SSH Management Privilege Escalation Vulnerability

2021-09-2216:00:00

tools.cisco.com

35

cisco

access points

ssh

privilege escalation

vulnerability

management

file operations

configuration change

software updates

network administrator

root user

advisory

EPSS

0

Percentile

5.1%

A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges.

The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-ap-LLjsGxv [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-ap-LLjsGxv”]

Affected configurations

Vulners

Node

ciscowireless_lan_controllerMatch8.6

OR

ciscowireless_lan_controllerMatch8.7

OR

ciscowireless_lan_controllerMatch8.8

OR

ciscowireless_lan_controllerMatch8.9

OR

ciscowireless_lan_controllerMatch8.10

OR

ciscowireless_lan_controllersMatchany

OR

ciscowireless_lan_controllersMatchany

OR

ciscowireless_lan_controllersMatchany

OR

cisco5508_wireless_controllerMatchany

OR

ciscocisco_aironet_access_point_software_\(ios_xe_controller\)Matchany

OR

ciscowireless_lan_controllerMatch8.6.101.0

OR

ciscowireless_lan_controllerMatch8.7.102.0

OR

ciscowireless_lan_controllerMatch8.7.106.0

OR

ciscowireless_lan_controllerMatch8.8.100.0

OR

ciscowireless_lan_controllerMatch8.8.111.0

OR

ciscowireless_lan_controllerMatch8.8.120.0

OR

ciscowireless_lan_controllerMatch8.8.125.0

OR

ciscowireless_lan_controllerMatch8.8.130.0

OR

ciscowireless_lan_controllerMatch8.9.100.0

OR

ciscowireless_lan_controllerMatch8.9.111.0

OR

ciscowireless_lan_controllerMatch8.10.105.0

OR

ciscowireless_lan_controllerMatch8.10.112.0

OR

ciscowireless_lan_controllerMatch8.10.113.0

OR

ciscowireless_lan_controllerMatch8.10.120.0

OR

ciscowireless_lan_controllerMatch8.10.121.0

OR

ciscowireless_lan_controllerMatch8.10.122.0

OR

ciscowireless_lan_controllerMatch8.10.130.0

OR

ciscowireless_lan_controllerMatch8.10.141.0

OR

ciscowireless_lan_controllerMatch8.10.150.0

OR

ciscowireless_lan_controllerMatch8.10.142.0

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatchany

OR

ciscocisco_aironet_access_point_software_\(ios_xe_controller\)Matchany

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8.6.101.0_when_installed_on_cisco_virtual_wireless_controller

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8.7.102.0_when_installed_on_cisco_virtual_wireless_controller

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8.7.106.0_when_installed_on_cisco_virtual_wireless_controller

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8.8.100.0_when_installed_on_cisco_virtual_wireless_controller

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8.8.111.0_when_installed_on_cisco_virtual_wireless_controller

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8.8.120.0_when_installed_on_cisco_virtual_wireless_controller

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8.8.125.0_when_installed_on_cisco_virtual_wireless_controller

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8.8.130.0_when_installed_on_cisco_virtual_wireless_controller

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8.9.100.0_when_installed_on_cisco_virtual_wireless_controller

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8.9.111.0_when_installed_on_cisco_virtual_wireless_controller

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8.10.105.0_when_installed_on_cisco_virtual_wireless_controller

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8.10.112.0_when_installed_on_cisco_virtual_wireless_controller

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8.10.113.0_when_installed_on_cisco_virtual_wireless_controller

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8.10.120.0_when_installed_on_cisco_virtual_wireless_controller

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8.10.121.0_when_installed_on_cisco_virtual_wireless_controller

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8.10.122.0_when_installed_on_cisco_virtual_wireless_controller

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8.10.130.0_when_installed_on_cisco_virtual_wireless_controller

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8.10.141.0_when_installed_on_cisco_virtual_wireless_controller

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8.10.150.0_when_installed_on_cisco_virtual_wireless_controller

OR

ciscowireless_lan_controllerMatch5500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch3500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8500_series_wireless_controllers

OR

ciscowireless_lan_controllerMatch8.10.142.0_when_installed_on_cisco_virtual_wireless_controller

VendorProductVersionCPE
ciscowireless_lan_controller8.6cpe:2.3:h:cisco:wireless_lan_controller:8.6:*:*:*:*:*:*:*
ciscowireless_lan_controller8.7cpe:2.3:h:cisco:wireless_lan_controller:8.7:*:*:*:*:*:*:*
ciscowireless_lan_controller8.8cpe:2.3:h:cisco:wireless_lan_controller:8.8:*:*:*:*:*:*:*
ciscowireless_lan_controller8.9cpe:2.3:h:cisco:wireless_lan_controller:8.9:*:*:*:*:*:*:*
ciscowireless_lan_controller8.10cpe:2.3:h:cisco:wireless_lan_controller:8.10:*:*:*:*:*:*:*
ciscowireless_lan_controllersanycpe:2.3:a:cisco:wireless_lan_controllers:any:*:*:*:*:*:*:*
cisco5508_wireless_controlleranycpe:2.3:h:cisco:5508_wireless_controller:any:*:*:*:*:*:*:*
ciscocisco_aironet_access_point_software_\(ios_xe_controller\)anycpe:2.3:a:cisco:cisco_aironet_access_point_software_\(ios_xe_controller\):any:*:*:*:*:*:*:*
ciscowireless_lan_controller8.6.101.0cpe:2.3:h:cisco:wireless_lan_controller:8.6.101.0:*:*:*:*:*:*:*
ciscowireless_lan_controller8.7.102.0cpe:2.3:h:cisco:wireless_lan_controller:8.7.102.0:*:*:*:*:*:*:*

Rows per page:

1-10 of 521

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-ap-LLjsGxv

EPSS

0

Percentile

5.1%

Related for CISCO-SA-CISCO-AP-LLJSGXV

nvd1 prion1 cvelist1 cve1