Cisco IW9165/WLC Web UI Command Injection Vulnerability

Key Information 1. Vulnerability Description: - Product: Cisco Unified Industrial Wireless Software for Ultra-Reliable Wireless Backhaul Access Point Command Injection Vulnerability - Impact: This vulnerability allows an unauthenticated, remote attacker to execute command injection attacks with root privileges by sending crafted HTTP requests to the web-based management interface. - Scope: Affects Catalyst IW9165D, Catalyst IW9165E, and Catalyst IW9167E model access points. 2. Affected Products: - Catalyst IW9165D Heavy Duty Access Points - Catalyst IW9165E Rugged Access Points and Wireless Clients - Catalyst IW9167E Heavy Duty Access Points 3. Remediation: - Cisco has released software updates to address this vulnerability. - There are no workarounds. 4. Affected Product List: - 6300 Series Embedded Services Access Points - Aironet 1540 Series - Aironet 1560 Series - Aironet 1810 Series OfficeExtend Access Points - Aironet 1810w Series Access Points - Aironet 1815 Series Access Points - Aironet 1830 Series Access Points - Aironet 1850 Series Access Points - Aironet 2800 Series Access Points - Aironet 3800 Series Access Points - Aironet 4800 Access Points - Business 100 Series Access Points and Mesh Extenders - Business 200 Series Access Points - Catalyst 9100 Series Access Points - Catalyst IW6300 Heavy Duty Series Access Points - FM Series Radio Transceivers - IEC6400 Edge Compute Appliances - Wireless LAN Controller (WLC) Software 5. Workarounds: - There are no workarounds. 6. Fixed Software: - Cisco has released free software updates to address this vulnerability. - Customers should obtain security patches through their regular software update channels. 7. Affected Product List: - 6300 Series Embedded Services Access Points - Aironet 1540 Series - Aironet 1560 Series - Aironet 1810 Series OfficeExtend Access Points - Aironet 1810w Series Access Points - Aironet 1815 Series Access Points - Aironet 1830 Series Access Points - Aironet 1850 Series Access Points - Aironet 2800 Series Access Points - Aironet 3800 Series Access Points - Aironet 4800 Access Points - Business 100 Series Access Points and Mesh Extenders - Business 200 Series Access Points - Catalyst 9100 Series Access Points - Catalyst IW6300 Heavy Duty Series Access Points - FM Series Radio Transceivers - IEC6400 Edge Compute Appliances - Wireless LAN Controller (WLC) Software 8. Affected Product List: - 6300 Series Embedded Services Access Points - Aironet 1540 Series - Aironet 1560 Series - Aironet 1810 Series OfficeExtend Access Points - Aironet 1810w Series Access Points - Aironet 1815 Series Access Points - Aironet 1830 Series Access Points - Aironet 1850 Series Access Points - Aironet 2800 Series Access Points - Aironet 3800 Series Access Points - Aironet 4800 Access Points - Business 100 Series Access Points and Mesh Extenders - Business 200 Series Access Points - Catalyst 9100 Series Access Points - Catalyst IW6300 Heavy Duty Series Access Points - FM Series Radio Transceivers - IEC6400 Edge Compute Appliances - Wireless LAN Controller (WLC) Software 9. Affected Product List: - 6300 Series Embedded Services Access Points - Aironet 1540 Series - Aironet 1560 Series - Aironet 1810 Series OfficeExtend Access Points - Aironet 1810w Series Access Points - Aironet 1815 Series Access Points - Aironet 1830 Series Access Points - Aironet 1850 Series Access Points - Aironet 2800 Series Access Points - Aironet 3800 Series Access Points - Aironet 4800 Access Points - Business 100 Series Access Points and Mesh Extenders - Business 200 Series Access Points - Catalyst 9100 Series Access Points - Catalyst IW6300 Heavy Duty Series Access Points - FM Series Radio Transceivers - IEC6400 Edge Compute Appliances - Wireless LAN Controller (WLC) Software 10. Affected Product List: - 6300 Series Embedded Services Access Points - Aironet 1540 Series - Aironet 1560 Series - Aironet 1810 Series OfficeExtend Access Points - Aironet 1810w Series Access Points - Aironet 1815 Series Access Points - Aironet 1830 Series Access Points - Aironet 1850 Series Access Points - Aironet 2800 Series Access Points - Aironet 3800 Series Access Points - Aironet 4800 Access Points - Business 100 Series Access Points and Mesh Extenders - Business 200 Series Access Points - Catalyst 9100 Series Access Points - Catalyst IW6300 Heavy Duty Series Access Points - FM Series Radio Transceivers - IEC6400 Edge Compute Appliances - Wireless LAN Controller (WLC) Software 11. Affected Product List: - 6300 Series Embedded Services Access Points - Aironet 1540 Series - Aironet 1560 Series - Aironet 1810 Series OfficeExtend Access Points - Aironet 1810w Series Access Points - Aironet 1815 Series Access Points - Aironet 1830 Series Access Points - Aironet 1850 Series Access Points - Aironet 2800 Series Access Points - Aironet 3800 Series Access Points - Aironet 4800 Access Points - Business 100 Series Access Points and Mesh Extenders - Business 200 Series Access Points - Catalyst 9100 Series Access

Goal Reached Thanks to every supporter — we hit 100%!

Cisco IW9165/WLC Web UI Command Injection Vulnerability