{"id":"CVE-2021-1419","title":"Cisco Aironet Access Points Privilege Escalation Vulnerability","summary":"A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges.\r\n\r\nThe vulnerability is du…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"vendor","vendor":"Cisco","product":"Cisco 5500 Series Wireless Controllers","affected":["aironet_access_point_software_ios_xe_controller","5500_series_wireless_controllers","3500_series_wireless_controllers","8500_series_wireless_controllers","virtual_wireless_controller"],"published":"2021-09-22","updated":"2021-09-22","sourceUpdated":"2021-09-22T16:00:00+00:00","source":"CSAF","sourceUrl":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-ap-LLjsGxv","references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-ap-LLjsGxv"},{"url":"https://software.cisco.com"}],"tags":["csaf","vendor-advisory","cisco"],"epss":0.00216,"epssPercentile":0.12353,"ingestedAt":"2026-09-08T15:58:18.543Z","slug":"CVE-2021-1419","body":"## Overview\n\nA vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges.\r\n\r\nThe vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\n\n## Vendor advisories\n\n- **cisco-sa-cisco-ap-LLjsGxv** · Cisco · affected: Cisco Aironet Access Point Software (IOS XE Controller), Cisco 5500 Series Wireless Controllers, Cisco 3500 Series Wireless Controllers, Cisco 8500 Series Wireless Controllers, Cisco Virtual Wireless Controller · updated 2021-09-22 · [advisory](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-ap-LLjsGxv)\n\n**Cisco Access Points SSH Management Privilege Escalation Vulnerability**. Released 2021-09-22.\n\nAffected:\n\n- Cisco Aironet Access Point Software (IOS XE Controller)\n- Cisco 5500 Series Wireless Controllers\n- Cisco 3500 Series Wireless Controllers\n- Cisco 8500 Series Wireless Controllers\n- Cisco Virtual Wireless Controller\n\n## Remediation\n\nCisco has released software updates that address this vulnerability. https://software.cisco.com","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}