{"id":"CVE-2021-1419","aliases":["EUVD-2021-6886","GHSA-j2cc-65xj-fpxh"],"status":"published","title":"Cisco Access Points SSH Management Privilege Escalation Vulnerability","description":"A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00216,"percentile":0.12241,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269","CWE-284"],"published":"2021-09-23T02:30:23Z","modified":"2026-06-17T03:31:43Z","products":[{"vendor":"cisco","product":"1100-8p_firmware"},{"vendor":"cisco","product":"1120_firmware"},{"vendor":"cisco","product":"1160_firmware"},{"vendor":"cisco","product":"aironet_1542d_firmware"},{"vendor":"cisco","product":"aironet_1542i_firmware"},{"vendor":"cisco","product":"aironet_1562d_firmware"},{"vendor":"cisco","product":"aironet_1562e_firmware"},{"vendor":"cisco","product":"aironet_1562i_firmware"},{"vendor":"cisco","product":"aironet_1815i_firmware"},{"vendor":"cisco","product":"aironet_1815m_firmware"},{"vendor":"cisco","product":"aironet_1815t_firmware"},{"vendor":"cisco","product":"aironet_1815w_firmware"},{"vendor":"cisco","product":"aironet_1830e_firmware"},{"vendor":"cisco","product":"aironet_1830i_firmware"},{"vendor":"cisco","product":"aironet_1840i_firmware"},{"vendor":"cisco","product":"aironet_1850e_firmware"},{"vendor":"cisco","product":"aironet_1850i_firmware"},{"vendor":"cisco","product":"aironet_2800e_firmware"},{"vendor":"cisco","product":"aironet_2800i_firmware"},{"vendor":"cisco","product":"aironet_3800e_firmware"},{"vendor":"cisco","product":"aironet_3800i_firmware"},{"vendor":"cisco","product":"aironet_3800p_firmware"},{"vendor":"cisco","product":"aironet_4800_firmware"},{"vendor":"cisco","product":"catalyst_9105axi_firmware"},{"vendor":"cisco","product":"catalyst_9105axw_firmware"},{"vendor":"cisco","product":"catalyst_9115axe_firmware"},{"vendor":"cisco","product":"catalyst_9115axi_firmware"},{"vendor":"cisco","product":"catalyst_9117_firmware"},{"vendor":"cisco","product":"catalyst_9120axe_firmware"},{"vendor":"cisco","product":"catalyst_9120axi_firmware"},{"vendor":"cisco","product":"catalyst_9120axp_firmware"},{"vendor":"cisco","product":"catalyst_9124axd_firmware"},{"vendor":"cisco","product":"catalyst_9124axi_firmware"},{"vendor":"cisco","product":"catalyst_9130axe_firmware"},{"vendor":"cisco","product":"catalyst_9130axi_firmware"},{"vendor":"cisco","product":"catalyst_9800_firmware"},{"vendor":"cisco","product":"catalyst_iw6300_ac_firmware"},{"vendor":"cisco","product":"catalyst_iw6300_dc_firmware"},{"vendor":"cisco","product":"catalyst_iw6300_dcw_firmware"},{"vendor":"cisco","product":"cisco wireless lan controller (wlc)"},{"vendor":"cisco","product":"esw6300_firmware"},{"vendor":"cisco","product":"wireless_lan_controller_software"}],"references":[{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-ap-LLjsGxv","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1419"},{"url":"https://github.com/advisories/GHSA-j2cc-65xj-fpxh"}],"sources":{"cve":[{"id":"CVE-2021-1419","title":"Cisco Access Points SSH Management Privilege Escalation Vulnerability","description":"A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.","status":"published","published":"2021-09-23T02:30:23.947Z","modified":"2024-11-07T21:52:19.55Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:33:08.045407Z"}],"euvd":[{"id":"EUVD-2021-6886","description":"A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.","status":"published","published":"2021-09-23T02:30:23Z","modified":"2024-11-07T21:52:19Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:05:07.279991Z"}],"ghsa":[{"id":"GHSA-j2cc-65xj-fpxh","title":"A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms...","description":"A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.","status":"published","published":"2022-05-24T19:15:40Z","modified":"2023-10-12T05:05:17Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269","CWE-284"],"updated_at":"2026-11-02T14:54:47.501822Z"}],"nvd":[{"id":"CVE-2021-1419","description":"A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.","status":"published","published":"2021-09-23T03:15:07.697Z","modified":"2026-06-17T03:31:43.913Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:06:58.933037Z"}]}}