← Back

CVE-2021-1423

nvd nist
Published: Mar 24, 2021Modified: Nov 21, 2024

JSON object

Loading...
4.4
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Exploitability: 0.8 / Impact: 3.6
Source: NVD

Description

A vulnerability in the implementation of a CLI command in Cisco Aironet Access Points (AP) could allow an authenticated, local attacker to overwrite files in the flash memory of the device. This vulnerability is due to insufficient input validation for a specific command. An attacker could exploit this vulnerability by issuing a command with crafted arguments. A successful exploit could allow the attacker to overwrite or create files with data that is already present in other files that are hosted on the affected device.

Affected (5)

3 products
Aironet Access Point Software
Catalyst 9800 Firmware
Wireless Lan Controller Software
Configuration A
1 vulnerable · 10 platform
Vulnerable SoftwareAffected Versions
All versions
Running on/withPlatform Versions
Cisco
1100 Integrated Services Router
All versions
Cisco
Aironet 1540
All versions
Cisco
Aironet 1560
All versions
Cisco
Aironet 1800
All versions
Cisco
Aironet 2800
All versions
Cisco
Aironet 3800
All versions
Cisco
Aironet 4800
All versions
Cisco
Catalyst 9100
All versions
Cisco
Catalyst Iw6300
All versions
Cisco
Esw6300
All versions
Configuration B
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cisco
Before 16.12.5
From 17.1 to 17.2
Running on/withPlatform Versions
Cisco
Catalyst 9800
All versions
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Before 8.5.171.0
From 8.6 to 8.10.130.0

Timeline

No history available yet.