What’s Vulnerable › Vulnerabilities
CVE-2021-1401: Cisco Small Business 100, 300, and 500 Series Wireless Access Points Vulnerabilities
- Severity: high (CVSS 7.2 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-05-06 · updated 2026-06-17
- Weakness: CWE-269
Description
Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to obtain sensitive information from or inject arbitrary commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Affected products
- Cisco Wap125 Firmware: through 1.0.3.1
- Cisco Wap131 Firmware: through 1.0.2.17
- Cisco Wap150 Firmware: through 1.1.2.4
- Cisco Wap351 Firmware: through 1.0.2.17
- Cisco Wap361 Firmware: through 1.1.2.4
- Cisco Wap581 Firmware: through 1.0.3.1
References
- http://jvn.jp/en/jp/JVN71263107/index.html
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-multi-ZAfKGXhF
- http://jvn.jp/en/jp/JVN71263107/index.html
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-multi-ZAfKGXhF
Get alerted when CVE-2021-1401 or the next vulnerability affects your stack