Lucene search

K
cve[email protected]CVE-2021-1547
HistoryMay 22, 2021 - 7:15 a.m.

CVE-2021-1547

2021-05-2207:15:07
CWE-77
web.nvd.nist.gov
61
cve-2021-1547
cisco
small business
wireless access points
command injection
remote attack
authentication
vulnerabilities
nvd

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

9 High

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

42.7%

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper validation of user-supplied input. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to the web-based management interface of an affected system. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the device. To exploit these vulnerabilities, the attacker must have valid administrative credentials for the device.

Affected configurations

NVD
Node
ciscowap125_firmwareRange≀1.0.3.1
AND
ciscowap125Match-
Node
ciscowap131_firmwareRange≀1.0.2.17
AND
ciscowap131Match-
Node
ciscowap150_firmwareRange≀1.1.2.4
AND
ciscowap150Match-
Node
ciscowap351_firmwareRange≀1.0.2.17
AND
ciscowap351Match-
Node
ciscowap361_firmwareRange≀1.1.2.4
AND
ciscowap361Match-
Node
ciscowap581_firmwareRange≀1.0.3.1
AND
ciscowap581Match-

CNA Affected

[
  {
    "product": "Cisco Business Wireless Access Point Software ",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

9 High

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

42.7%

Related for CVE-2021-1547