PT-2021-2447 · Cisco · Cisco Access Points

Published 2021-03-24 · Updated 2023-05-22 · CVE-2021-1449

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Cisco Access Points Software (affected versions not specified)

Description: A vulnerability in the boot logic of Cisco Access Points Software could allow an authenticated, local attacker to execute unsigned code at boot time. The issue is due to an improper check performed by the code managing system startup processes. An attacker could exploit this by modifying a specific file stored on the system, bypassing existing protections and allowing the execution of unsigned code at boot time, thus bypassing the software image verification check part of the secure boot process. To exploit this, the attacker would need access to the development shell (devshell) on the device.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2021-01812

CVE-2021-1449

Affected Products

Cisco Access Points

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-privesc-wEVfp8Ud · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01812 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-1449 · Security Note
• https://osv.dev/vulnerability/CVE-2021-1449 · Vendor Advisory
• https://t.me/cvenotify/12393 · Telegram Post