CVE:CVE-2021-1401
CNNVD:CNNVD-202105-209
Cisco Small Business是美国思科（Cisco）公司的一个交换机。
Cisco Small Business 100, 300, and 500 Series Wireless Access Points  存在操作系统命令注入漏洞，攻击者可以通过向受影响系统的基于web的管理界面发送精心设计的HTTP请求来利用这个漏洞。一个成功的利用可能允许攻击者可利用该漏洞执行任意命令。
solution:Upgrade cisco wap125_firmware to a higher version than 1.0.3.1,and avoid the version (,1.0.3.1]; Upgrade cisco wap131_firmware to a higher version than 1.0.2.17,and avoid the version (,1.0.2.17]; Upgrade cisco wap150_firmware to a higher version than 1.1.2.4,and avoid the version (,1.1.2.4]; Upgrade cisco wap351_firmware to a higher version than 1.0.2.17,and avoid the version (,1.0.2.17]; Upgrade cisco wap361_firmware to a higher version than 1.1.2.4,and avoid the version (,1.1.2.4]; Upgrade cisco wap581_firmware to a higher version than 1.0.3.1,and avoid the version (,1.0.3.1]