CVE-2021-1400

moderate-risk
Published 2021-05-06

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to obtain sensitive information from or inject arbitrary commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Do I need to act?

-
0.50% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10 High
NETWORK / LOW complexity

Affected Products (6)

Wap125 Firmware
Wap131 Firmware
Wap150 Firmware
Wap351 Firmware
Wap361 Firmware
Wap581 Firmware

Affected Vendors

Cisco

References (4)

Third Party Advisory http://jvn.jp/en/jp/JVN71263107/index.html
Vendor Advisory https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-s...
Third Party Advisory http://jvn.jp/en/jp/JVN71263107/index.html
Vendor Advisory https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-s...
45
/ 100
moderate-risk
Severity 30/34 · Critical
Exploitability 2/34 · Minimal
Exposure 13/34 · Low