Lucene search

[email protected]NVD:CVE-2021-1400

HistoryMay 06, 2021 - 1:15 p.m.

CVE-2021-1400

2021-05-0613:15:09

CWE-269

[email protected]

web.nvd.nist.gov

cisco small business

wireless access points

vulnerabilities

web-based management interface

sensitive information

arbitrary commands

remote attack

device security

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

52.7%

JSON

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to obtain sensitive information from or inject arbitrary commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected configurations

Nvd

Node

ciscowap125_firmwareRange≤1.0.3.1

AND

ciscowap125Match-

Node

ciscowap131_firmwareRange≤1.0.2.17

AND

ciscowap131Match-

Node

ciscowap150_firmwareRange≤1.1.2.4

AND

ciscowap150Match-

Node

ciscowap351_firmwareRange≤1.0.2.17

AND

ciscowap351Match-

Node

ciscowap361_firmwareRange≤1.1.2.4

AND

ciscowap361Match-

Node

ciscowap581_firmwareRange≤1.0.3.1

AND

ciscowap581Match-

VendorProductVersionCPE
ciscowap125_firmware*cpe:2.3:o:cisco:wap125_firmware:*:*:*:*:*:*:*:*
ciscowap125-cpe:2.3:h:cisco:wap125:-:*:*:*:*:*:*:*
ciscowap131_firmware*cpe:2.3:o:cisco:wap131_firmware:*:*:*:*:*:*:*:*
ciscowap131-cpe:2.3:h:cisco:wap131:-:*:*:*:*:*:*:*
ciscowap150_firmware*cpe:2.3:o:cisco:wap150_firmware:*:*:*:*:*:*:*:*
ciscowap150-cpe:2.3:h:cisco:wap150:-:*:*:*:*:*:*:*
ciscowap351_firmware*cpe:2.3:o:cisco:wap351_firmware:*:*:*:*:*:*:*:*
ciscowap351-cpe:2.3:h:cisco:wap351:-:*:*:*:*:*:*:*
ciscowap361_firmware*cpe:2.3:o:cisco:wap361_firmware:*:*:*:*:*:*:*:*
ciscowap361-cpe:2.3:h:cisco:wap361:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	wap125_firmware	*	cpe:2.3:o:cisco:wap125_firmware::::::::
cisco	wap125	-	cpe:2.3:h:cisco:wap125:-:::::::*
cisco	wap131_firmware	*	cpe:2.3:o:cisco:wap131_firmware::::::::
cisco	wap131	-	cpe:2.3:h:cisco:wap131:-:::::::*
cisco	wap150_firmware	*	cpe:2.3:o:cisco:wap150_firmware::::::::
cisco	wap150	-	cpe:2.3:h:cisco:wap150:-:::::::*
cisco	wap351_firmware	*	cpe:2.3:o:cisco:wap351_firmware::::::::
cisco	wap351	-	cpe:2.3:h:cisco:wap351:-:::::::*
cisco	wap361_firmware	*	cpe:2.3:o:cisco:wap361_firmware::::::::
cisco	wap361	-	cpe:2.3:h:cisco:wap361:-:::::::*

Rows per page:

1-10 of 121

References

jvn.jp/en/jp/JVN71263107/index.html

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-multi-ZAfKGXhF

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

52.7%

JSON

Related for NVD:CVE-2021-1400

prion1 cve1 cvelist1 cisco1 jvn1