Lucene search

K
nvd[email protected]NVD:CVE-2021-1401
HistoryMay 06, 2021 - 1:15 p.m.

CVE-2021-1401

2021-05-0613:15:10
CWE-269
CWE-78
web.nvd.nist.gov

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

62.0%

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to obtain sensitive information from or inject arbitrary commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected configurations

NVD
Node
ciscowap125_firmwareRange≀1.0.3.1
AND
ciscowap125Match-
Node
ciscowap131_firmwareRange≀1.0.2.17
AND
ciscowap131Match-
Node
ciscowap150_firmwareRange≀1.1.2.4
AND
ciscowap150Match-
Node
ciscowap351_firmwareRange≀1.0.2.17
AND
ciscowap351Match-
Node
ciscowap361_firmwareRange≀1.1.2.4
AND
ciscowap361Match-
Node
ciscowap581_firmwareRange≀1.0.3.1
AND
ciscowap581Match-

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

62.0%

Related for NVD:CVE-2021-1401