CVE-2021-1551

CVE-2021-1551 describes multiple command injection vulnerabilities in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless Access Points. These flaws stem from improper validation of user-supplied input, allowing an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability has a CVSS score of 7.2 (HIGH), indicating a network-based attack with low attack complexity and high impact on confidentiality, integrity, and availability, requiring valid administrative credentials. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.