Vulnerability · Published May 6, 2021 · Assigned by cisco

CVE-2021-1401Cisco Small Business 100, 300, and 500 Series Wireless Access Points Vulnerabilities

High 8.8

In plain English

A high-severity privilege mismanagement in Cisco Business Wireless Access Point Software from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.0% (higher than 81% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)2.0%top 18.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to obtain sensitive information from or inject arbitrary commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products (as reported)

Vendor	Product	Versions
Cisco	Cisco Business Wireless Access Point Software	n/a

Weakness: CWE-269 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

20210505 Cisco Small Business 100, 300, and 500 Series Wireless Access Points Vulnerabilities vendor-advisory, x_refsource_CISCO
JVN#71263107 third-party-advisory, x_refsource_JVN