Lucene search

[email protected]NVD:CVE-2021-1401

HistoryMay 06, 2021 - 1:15 p.m.

CVE-2021-1401

2021-05-0613:15:10

CWE-269

CWE-78

[email protected]

web.nvd.nist.gov

cisco

small business

wireless access points

vulnerabilities

remote attacker

sensitive information

inject

arbitrary commands

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

62.0%

JSON

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to obtain sensitive information from or inject arbitrary commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected configurations

Nvd

Node

ciscowap125_firmwareRange≤1.0.3.1

AND

ciscowap125Match-

Node

ciscowap131_firmwareRange≤1.0.2.17

AND

ciscowap131Match-

Node

ciscowap150_firmwareRange≤1.1.2.4

AND

ciscowap150Match-

Node

ciscowap351_firmwareRange≤1.0.2.17

AND

ciscowap351Match-

Node

ciscowap361_firmwareRange≤1.1.2.4

AND

ciscowap361Match-

Node

ciscowap581_firmwareRange≤1.0.3.1

AND

ciscowap581Match-

VendorProductVersionCPE
ciscowap125_firmware*cpe:2.3:o:cisco:wap125_firmware:*:*:*:*:*:*:*:*
ciscowap125-cpe:2.3:h:cisco:wap125:-:*:*:*:*:*:*:*
ciscowap131_firmware*cpe:2.3:o:cisco:wap131_firmware:*:*:*:*:*:*:*:*
ciscowap131-cpe:2.3:h:cisco:wap131:-:*:*:*:*:*:*:*
ciscowap150_firmware*cpe:2.3:o:cisco:wap150_firmware:*:*:*:*:*:*:*:*
ciscowap150-cpe:2.3:h:cisco:wap150:-:*:*:*:*:*:*:*
ciscowap351_firmware*cpe:2.3:o:cisco:wap351_firmware:*:*:*:*:*:*:*:*
ciscowap351-cpe:2.3:h:cisco:wap351:-:*:*:*:*:*:*:*
ciscowap361_firmware*cpe:2.3:o:cisco:wap361_firmware:*:*:*:*:*:*:*:*
ciscowap361-cpe:2.3:h:cisco:wap361:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	wap125_firmware	*	cpe:2.3:o:cisco:wap125_firmware::::::::
cisco	wap125	-	cpe:2.3:h:cisco:wap125:-:::::::*
cisco	wap131_firmware	*	cpe:2.3:o:cisco:wap131_firmware::::::::
cisco	wap131	-	cpe:2.3:h:cisco:wap131:-:::::::*
cisco	wap150_firmware	*	cpe:2.3:o:cisco:wap150_firmware::::::::
cisco	wap150	-	cpe:2.3:h:cisco:wap150:-:::::::*
cisco	wap351_firmware	*	cpe:2.3:o:cisco:wap351_firmware::::::::
cisco	wap351	-	cpe:2.3:h:cisco:wap351:-:::::::*
cisco	wap361_firmware	*	cpe:2.3:o:cisco:wap361_firmware::::::::
cisco	wap361	-	cpe:2.3:h:cisco:wap361:-:::::::*

Rows per page:

1-10 of 121

References

jvn.jp/en/jp/JVN71263107/index.html

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-multi-ZAfKGXhF

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

62.0%

JSON

Related for NVD:CVE-2021-1401

cve1 prion1 cvelist1 cisco1 jvn1