CVE-2021-1551

CVE-2021-1551 affects Cisco Small Business 100, 300, and 500 Series Wireless Access Points. The issue is command injection via the device’s web-based management interface caused by improper validation of user input. An authenticated attacker with valid admin credentials could exploit crafted HTTP...

CVE-2024-20336

The CVE-2024-20336 entry affects Cisco Small Business 100/300/500 Series Wireless APs. The vulnerability is in the web-based management interface, caused by insufficient validation of user-supplied input, enabling an authenticated, remote attacker with valid admin credentials to trigger a buffer ...

CVE-2021-1549

CVE-2021-1549 affects Cisco Small Business 100/300/500 Series Wireless APs where the web-based management interface is vulnerable to command injection due to improper input validation. An authenticated attacker with valid admin credentials can exploit crafted HTTP requests to execute arbitrary co...

CVE-2021-1550

The CVE-2021-1550 issue affects Cisco Small Business 100, 300, and 500 Series Wireless Access Points. The vulnerability is a command injection flaw in the device’s web-based management interface caused by improper validation of user-supplied input. An authenticated attacker with valid administrat...

CVE-2021-1552

Cisco Small Business 100/300/500 Series Wireless Access Points expose input-validation based command-injection vulnerabilities in the web-based management interface. An authenticated attacker with admin credentials can send crafted HTTP requests to execute arbitrary commands with root privileges ...

CVE-2021-1547

CVE-2021-1547 affects Cisco Small Business 100/300/500 Series Wireless Access Points. The issue lies in the web-based management interface where improper validation of user input enables authenticated, remote command injection. With valid admin credentials, an attacker could execute arbitrary com...

CVE-2021-1548

The CVE-2021-1548 issue affects Cisco Small Business 100/300/500 Series Wireless Access Points. Affected component: web-based management interface; root cause: improper validation of user-supplied input enabling command injection. An authenticated attacker with valid administrative credentials ca...

CVE-2021-1553

CVE-2021-1553 affects Cisco Small Business 100, 300, and 500 Series Wireless Access Points. The issue is an input-validation error in the web-based management interface that allows an authenticated attacker with valid admin credentials to perform command injection and execute arbitrary commands w...

CVE-2021-1554

Cisco CVE-2021-1554 affects Small Business 100/300/500 Series Wireless Access Points. The issue arises from improper validation in the web-based management interface, allowing an authenticated attacker with admin credentials to perform command injections via crafted HTTP requests, potentially exe...

CVE-2024-20335

CVE-2024-20335 affects Cisco Small Business 100/300/500 Series Wireless APs. The issue is in the web-based management interface where insufficient validation of input enables an authenticated, remote attacker with valid admin credentials to perform command injection and potentially execute arbitr...

CVE-2021-1555

CVE-2021-1555 affects Cisco Small Business 100/300/500 Series Wireless Access Points. The issue is command injection via the web-based management interface due to improper validation of user-supplied input. An authenticated attacker with valid admin credentials could send crafted HTTP requests to...

CVE-2018-0415

CVE-2018-0415 describes a DoS in Cisco Small Business 100 Series and 300 Series Wireless Access Points due to improper processing of certain EAPOL frames in the EAPOL implementation. An authenticated, adjacent attacker can send crafted EAPOL frames to force the AP to disassociate all STAs and den...

CVE-2021-1400

CVE-2021-1400 affects Cisco Small Business 100, 300, and 500 Series Wireless Access Points (WAPs). The Cisco advisory and related records describe multiple vulnerabilities in the web-based management interface, including improper access control (CWE-284) that can allow an authenticated attacker t...

CVE-2018-0412

The CVE-2018-0412 issue affects Cisco Small Business 100 Series and 300 Series Wireless Access Points, where improper processing of EAPOL messages during the Wi‑Fi handshake allows an unauthenticated adjacent attacker to downgrade the cipher from AES‑CCMP to WPA‑TKIP. This cryptographic downgrade...

CVE-2021-1401

Cisco Small Business 100/300/500 Series Wireless Access Points are affected by CVE-2021-1401 (command injection). The web-based management interface can be abused by an authenticated, remote attacker sending a crafted HTTP request to inject arbitrary commands or obtain sensitive information. Affe...

CVE-2018-0098

CVE-2018-0098 affects Cisco WAP150 and WAP361 devices, where the web-based management interface is vulnerable to cross-site scripting due to insufficient validation of user input. An unauthenticated, remote attacker can lure a user into clicking a crafted link, enabling arbitrary script execution...