---
id: CVE-2021-1419
title: Cisco Aironet Access Points Privilege Escalation Vulnerability
summary: "A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges.\r\n\r\nThe vulnerability is du…"
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: vendor
vendor: Cisco
product: Cisco 5500 Series Wireless Controllers
affected:
  - aironet_access_point_software_ios_xe_controller
  - 5500_series_wireless_controllers
  - 3500_series_wireless_controllers
  - 8500_series_wireless_controllers
  - virtual_wireless_controller
published: '2021-09-22'
updated: '2021-09-22'
sourceUpdated: '2021-09-22T16:00:00+00:00'
source: CSAF
sourceUrl: >-
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-ap-LLjsGxv
references:
  - url: >-
      https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-ap-LLjsGxv
  - url: 'https://software.cisco.com'
tags:
  - csaf
  - vendor-advisory
  - cisco
epss: 0.00216
epssPercentile: 0.10765
ingestedAt: '2026-09-08T15:58:18.543Z'
---

## Overview

A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges.

The vulnerability is due to improper checking on file operations within the SSH management interface. A network administrator user could exploit this vulnerability by accessing an affected device through SSH management to make a configuration change. A successful exploit could allow the attacker to gain privileges equivalent to the root user.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

## Vendor advisories

- **cisco-sa-cisco-ap-LLjsGxv** · Cisco · affected: Cisco Aironet Access Point Software (IOS XE Controller), Cisco 5500 Series Wireless Controllers, Cisco 3500 Series Wireless Controllers, Cisco 8500 Series Wireless Controllers, Cisco Virtual Wireless Controller · updated 2021-09-22 · [advisory](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-ap-LLjsGxv)

**Cisco Access Points SSH Management Privilege Escalation Vulnerability**. Released 2021-09-22.

Affected:

- Cisco Aironet Access Point Software (IOS XE Controller)
- Cisco 5500 Series Wireless Controllers
- Cisco 3500 Series Wireless Controllers
- Cisco 8500 Series Wireless Controllers
- Cisco Virtual Wireless Controller

## Remediation

Cisco has released software updates that address this vulnerability. https://software.cisco.com