Command Injection in Cisco Systems, Inc products - CVE-2021-1551
Published: May 21, 2021
Vulnerability identifier: #VU53416
CSH Severity: Low
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-1551
CWE-ID: CWE-77
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to execute arbitrary commands on the target system.
The vulnerability exists due to improper input validation in the web-based management interface. A remote administrator can send a specially crafted HTTP request and execute arbitrary commands on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
Cisco WAP125 Wireless-AC Dual Band Desktop Access Point with PoE
WAP131 Wireless-N Dual Radio Access Point with PoE
Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE
WAP351 Wireless-N Dual Radio Access Point with 5-Port Switch
Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE
WAP581 Wireless-AC Dual Radio Wave 2 Access Point with 2.5GbE LAN
WAP131 Wireless-N Dual Radio Access Point with PoE
Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE
WAP351 Wireless-N Dual Radio Access Point with 5-Port Switch
Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE
WAP581 Wireless-AC Dual Radio Wave 2 Access Point with 2.5GbE LAN
How to mitigate CVE-2021-1551
Install updates from vendor's website.
Cisco WAP125 Wireless-AC Dual Band Desktop Access Point with PoE - update to 1.0.4.3
Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE - update to 1.1.3.2
Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE - update to 1.1.3.2
WAP581 Wireless-AC Dual Radio Wave 2 Access Point with 2.5GbE LAN - update to 1.0.4.4
Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE - update to 1.1.3.2
Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE - update to 1.1.3.2
WAP581 Wireless-AC Dual Radio Wave 2 Access Point with 2.5GbE LAN - update to 1.0.4.4