VDB
CVE-2021-1423
CVE-2021-1423
PUBLISHED
CVSS 4.400000095367432 MEDIUM
A vulnerability in the implementation of a CLI command in Cisco Aironet Access Points (AP) could allow an authenticated, local attacker to overwrite files in the flash memory of the device. This vulnerability is due to insufficient input validation for a specific command. An attacker could exploit this vulnerability by issuing a command with crafted arguments. A successful exploit could allow the attacker to overwrite or create files with data that is already present in other files that are hosted on the affected device.
EPSS 0.07% · 21.5th percentile
Risk Scores
CVSS 3.1
4.400000095367432
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
EPSS Score
0.07%
21.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | catalyst_9800_firmware | 17.1, 0 |
| cisco | aironet_access_point_software | |
| cisco | wireless_lan_controller_software | 0, 8.6 |
| Cisco | Cisco Aironet Access Point Software | * |
Exploit Intelligence
Timeline
- Mar 24, 2021 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 22, 2022 CVE Updated