Lucene search

CiscoCVE-2021-1401

HistoryMay 06, 2021 - 1:15 p.m.

CVE-2021-1401

2021-05-0613:15:10

CWE-269

CWE-78

cisco

web.nvd.nist.gov

cisco

small business

wireless access points

vulnerabilities

cve-2021-1401

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.002

Percentile

62.0%

JSON

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to obtain sensitive information from or inject arbitrary commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected configurations

Nvd

Node

ciscowap125_firmwareRange≤1.0.3.1

AND

ciscowap125Match-

Node

ciscowap131_firmwareRange≤1.0.2.17

AND

ciscowap131Match-

Node

ciscowap150_firmwareRange≤1.1.2.4

AND

ciscowap150Match-

Node

ciscowap351_firmwareRange≤1.0.2.17

AND

ciscowap351Match-

Node

ciscowap361_firmwareRange≤1.1.2.4

AND

ciscowap361Match-

Node

ciscowap581_firmwareRange≤1.0.3.1

AND

ciscowap581Match-

VendorProductVersionCPE
ciscowap125_firmware*cpe:2.3:o:cisco:wap125_firmware:*:*:*:*:*:*:*:*
ciscowap125-cpe:2.3:h:cisco:wap125:-:*:*:*:*:*:*:*
ciscowap131_firmware*cpe:2.3:o:cisco:wap131_firmware:*:*:*:*:*:*:*:*
ciscowap131-cpe:2.3:h:cisco:wap131:-:*:*:*:*:*:*:*
ciscowap150_firmware*cpe:2.3:o:cisco:wap150_firmware:*:*:*:*:*:*:*:*
ciscowap150-cpe:2.3:h:cisco:wap150:-:*:*:*:*:*:*:*
ciscowap351_firmware*cpe:2.3:o:cisco:wap351_firmware:*:*:*:*:*:*:*:*
ciscowap351-cpe:2.3:h:cisco:wap351:-:*:*:*:*:*:*:*
ciscowap361_firmware*cpe:2.3:o:cisco:wap361_firmware:*:*:*:*:*:*:*:*
ciscowap361-cpe:2.3:h:cisco:wap361:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	wap125_firmware	*	cpe:2.3:o:cisco:wap125_firmware::::::::
cisco	wap125	-	cpe:2.3:h:cisco:wap125:-:::::::*
cisco	wap131_firmware	*	cpe:2.3:o:cisco:wap131_firmware::::::::
cisco	wap131	-	cpe:2.3:h:cisco:wap131:-:::::::*
cisco	wap150_firmware	*	cpe:2.3:o:cisco:wap150_firmware::::::::
cisco	wap150	-	cpe:2.3:h:cisco:wap150:-:::::::*
cisco	wap351_firmware	*	cpe:2.3:o:cisco:wap351_firmware::::::::
cisco	wap351	-	cpe:2.3:h:cisco:wap351:-:::::::*
cisco	wap361_firmware	*	cpe:2.3:o:cisco:wap361_firmware::::::::
cisco	wap361	-	cpe:2.3:h:cisco:wap361:-:::::::*

Rows per page:

1-10 of 121

CNA Affected

[
  {
    "product": "Cisco Business Wireless Access Point Software",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN71263107/index.html

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-multi-ZAfKGXhF

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.002

Percentile

62.0%

JSON

Related for CVE-2021-1401