CVE-2021-1437

Name of the Vulnerable Software and Affected Versions: Cisco Aironet Series Access Points Software (affected versions not specified)

Description: The issue is related to the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software, which is vulnerable due to an unrestricted Trivial File Transfer Protocol (TFTP) configuration. This could allow an unauthenticated, remote attacker to obtain confidential information from an affected device by sending a specific TFTP request. A successful exploit could allow the attacker to download any file from the filesystem of the affected access point (AP).

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.