CVE-2021-1555

CVE-2021-1555 describes multiple command injection vulnerabilities in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless Access Points. These flaws, stemming from improper input validation, allow an authenticated, remote attacker to execute arbitrary commands with root privileges by sending crafted HTTP requests. Rated 7.2 HIGH, exploitation requires valid administrative credentials, but a successful attack grants full control over the device. Despite its severity, there is no public exploit code, active exploitation, or significant community discussion reported.