关键信息 1. 漏洞描述: - 产品: Cisco Unified Industrial Wireless Software for Ultra-Reliable Wireless Backhaul Access Point Command Injection Vulnerability - 影响: 该漏洞允许未经授权的远程攻击者通过发送构造的HTTP请求到基于Web的管理接口，执行具有root权限的命令注入攻击。 - 影响范围: 影响Catalyst IW9165D、Catalyst IW9165E和Catalyst IW9167E型号的访问点。 2. 受影响的产品: - Catalyst IW9165D Heavy Duty Access Points - Catalyst IW9165E Rugged Access Points and Wireless Clients - Catalyst IW9167E Heavy Duty Access Points 3. 修复措施: - Cisco已发布软件更新来解决此漏洞。 - 无工作绕过措施。 4. 受影响的产品列表: - 6300 Series Embedded Services Access Points - Aironet 1540 Series - Aironet 1560 Series - Aironet 1810 Series OfficeExtend Access Points - Aironet 1810w Series Access Points - Aironet 1815 Series Access Points - Aironet 1830 Series Access Points - Aironet 1850 Series Access Points - Aironet 2800 Series Access Points - Aironet 3800 Series Access Points - Aironet 4800 Access Points - Business 100 Series Access Points and Mesh Extenders - Business 200 Series Access Points - Catalyst 9100 Series Access Points - Catalyst IW6300 Heavy Duty Series Access Points - FM Series Radio Transceivers - IEC6400 Edge Compute Appliances - Wireless LAN Controller (WLC) Software 5. 工作绕过: - 无工作绕过措施。 6. 固定软件: - Cisco已发布免费软件更新来解决此漏洞。 - 客户应通过常规软件更新渠道获取安全补丁。 7. 受影响的产品列表: - 6300 Series Embedded Services Access Points - Aironet 1540 Series - Aironet 1560 Series - Aironet 1810 Series OfficeExtend Access Points - Aironet 1810w Series Access Points - Aironet 1815 Series Access Points - Aironet 1830 Series Access Points - Aironet 1850 Series Access Points - Aironet 2800 Series Access Points - Aironet 3800 Series Access Points - Aironet 4800 Access Points - Business 100 Series Access Points and Mesh Extenders - Business 200 Series Access Points - Catalyst 9100 Series Access Points - Catalyst IW6300 Heavy Duty Series Access Points - FM Series Radio Transceivers - IEC6400 Edge Compute Appliances - Wireless LAN Controller (WLC) Software 8. 受影响的产品列表: - 6300 Series Embedded Services Access Points - Aironet 1540 Series - Aironet 1560 Series - Aironet 1810 Series OfficeExtend Access Points - Aironet 1810w Series Access Points - Aironet 1815 Series Access Points - Aironet 1830 Series Access Points - Aironet 1850 Series Access Points - Aironet 2800 Series Access Points - Aironet 3800 Series Access Points - Aironet 4800 Access Points - Business 100 Series Access Points and Mesh Extenders - Business 200 Series Access Points - Catalyst 9100 Series Access Points - Catalyst IW6300 Heavy Duty Series Access Points - FM Series Radio Transceivers - IEC6400 Edge Compute Appliances - Wireless LAN Controller (WLC) Software 9. 受影响的产品列表: - 6300 Series Embedded Services Access Points - Aironet 1540 Series - Aironet 1560 Series - Aironet 1810 Series OfficeExtend Access Points - Aironet 1810w Series Access Points - Aironet 1815 Series Access Points - Aironet 1830 Series Access Points - Aironet 1850 Series Access Points - Aironet 2800 Series Access Points - Aironet 3800 Series Access Points - Aironet 4800 Access Points - Business 100 Series Access Points and Mesh Extenders - Business 200 Series Access Points - Catalyst 9100 Series Access Points - Catalyst IW6300 Heavy Duty Series Access Points - FM Series Radio Transceivers - IEC6400 Edge Compute Appliances - Wireless LAN Controller (WLC) Software 10. 受影响的产品列表: - 6300 Series Embedded Services Access Points - Aironet 1540 Series - Aironet 1560 Series - Aironet 1810 Series OfficeExtend Access Points - Aironet 1810w Series Access Points - Aironet 1815 Series Access Points - Aironet 1830 Series Access Points - Aironet 1850 Series Access Points - Aironet 2800 Series Access Points - Aironet 3800 Series Access Points - Aironet 4800 Access Points - Business 100 Series Access Points and Mesh Extenders - Business 200 Series Access Points - Catalyst 9100 Series Access Points - Catalyst IW6300 Heavy Duty Series Access Points - FM Series Radio Transceivers - IEC6400 Edge Compute Appliances - Wireless LAN Controller (WLC) Software 11. 受影响的产品列表: - 6300 Series Embedded Services Access Points - Aironet 1540 Series - Aironet 1560 Series - Aironet 1810 Series OfficeExtend Access Points - Aironet 1810w Series Access Points - Aironet 1815 Series Access Points - Aironet 1830 Series Access Points - Aironet 1850 Series Access Points - Aironet 2800 Series Access Points - Aironet 3800 Series Access Points - Aironet 4800 Access Points - Business 100 Series Access Points and Mesh Extenders - Business 200 Series Access Points - Catalyst 9100 Series Access Points - Catalyst IW6300 Heavy Duty Series Access Points - FM Series Radio Transceivers - IEC6400 Edge Compute Appliances - Wireless LAN Controller (WLC) Software 12. 受影响的产品列表: - 6300 Series Embedded Services Access Points - Aironet 1540 Series - Aironet 1560 Series - Aironet 1810 Series OfficeExtend Access Points - Aironet 1810w Series Access Points - Aironet 1815 Series Access Points - Aironet 1830 Series Access Points - Aironet 1850 Series Access Points - Aironet 2800 Series Access Points - Aironet 3800 S