CVE-2019-1829

CVE-2019-1829 is a vulnerability in the CLI of Cisco Aironet Series Access Points where an authenticated, local attacker with valid administrator credentials can abuse improper validation of input to certain CLI commands to gain access to the underlying Linux OS. Affected product: Cisco Aironet A...

CVE-2019-1835: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the CLI of Cisco Aironet Access Points APs could allow an authenticated, local attacker to access sensitive information stored in an AP. The vulnerability is due to improper sanitization of user-supplied input in specific CLI commands. An attacker could exploit this vulnerabili...

CVE-2019-1826: Improper Input Validation

A vulnerability in the quality of service QoS feature of Cisco Aironet Series Access Points APs could allow an authenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation on QoS fields within Wi-Fi frames...

CVE-2019-1829: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of Cisco Aironet Series Access Points APs could allow an authenticated, local attacker to gain access to the underlying Linux operating system OS without the proper authentication. The attacker would need valid administrator device credentials. The vulnerability is due ...

CVE-2019-1834: Improper Input Validation

A vulnerability in the internal packet processing of Cisco Aironet Series Access Points APs could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected AP if the switch interface where the AP is connected has port security configured. The...

Design/Logic Flaw

A vulnerability in the development shell devshell authentication for Cisco Aironet Series Access Points APs running the Cisco AP-COS operating system could allow an authenticated, local attacker to access the development shell without proper authentication, which allows for root access to the...

CVE-2019-1654

A vulnerability in the development shell devshell authentication for Cisco Aironet Series Access Points APs running the Cisco AP-COS operating system could allow an authenticated, local attacker to access the development shell without proper authentication, which allows for root access to the...

CVE-2019-1654 Cisco Aironet Series Access Points Development Shell Access Vulnerability

A vulnerability in the development shell devshell authentication for Cisco Aironet Series Access Points APs running the Cisco AP-COS operating system could allow an authenticated, local attacker to access the development shell without proper authentication, which allows for root access to the...

CVE-2019-1654

Cisco Aironet Series APs running Cisco AP-COS are affected by CVE-2019-1654, where an authenticated, local attacker with valid device credentials can access the development shell (devshell) and gain root access to the underlying Linux OS due to improper input validation at the CLI authentication ...

Cisco Aironet Series Access Points Command Injection Vulnerability

A vulnerability in the CLI of Cisco Aironet Series Access Points APs could allow an authenticated, local attacker to gain access to the underlying Linux operating system OS without the proper authentication. The attacker would need valid administrator device credentials. The vulnerability is due ...

Cisco Aironet Series Access Points Directory Traversal Vulnerability

A vulnerability in the CLI of Cisco Aironet Access Points APs could allow an authenticated, local attacker to access sensitive information stored in an AP. The vulnerability is due to improper sanitization of user-supplied input in specific CLI commands. An attacker could exploit this vulnerabili...

Cisco Aironet Series Access Points Development Shell Access Vulnerability

A vulnerability in the development shell devshell authentication for Cisco Aironet Series Access Points APs running the Cisco AP-COS operating system could allow an authenticated, local attacker to access the development shell without proper authentication, which allows for root access to the...

PT-2019-1986

Name of the Vulnerable Software and Affected Versions Cisco Aironet Series Access Points APs affected versions not specified Description A vulnerability in the internal packet processing of Cisco Aironet Series Access Points could allow an unauthenticated, adjacent attacker to cause a denial of...

PT-2019-1981

Name of the Vulnerable Software and Affected Versions Cisco Aironet Series Access Points versions prior to 8.3.150.0 Cisco Aironet Series Access Points versions prior to 8.5.135.0 Cisco Aironet Series Access Points versions prior to 8.8.100.0 Description A vulnerability in the development shell...

PT-2019-1990

Name of the Vulnerable Software and Affected Versions Cisco Aironet Access Points AP versions 1540, 1560, 1800, 2800, 3800 Description The issue is related to errors in configuration and improper validation of user-supplied input for certain CLI commands. This could allow an authenticated, local...

PT-2019-1989

Name of the Vulnerable Software and Affected Versions Cisco Aironet Series Access Points versions 1560, 2800, 3800, 4800 Description A vulnerability in the quality of service QoS feature could allow an authenticated, adjacent attacker to cause a denial of service DoS condition on an affected...

PT-2019-2138

Name of the Vulnerable Software and Affected Versions Cisco Aironet Access Points versions 8.8 through 8.9 Description The issue is related to improper restriction of a directory path name, which could allow an attacker to gain unauthorized access to protected information. An authenticated, local...

CVE-2019-1654: Missing Authentication for Critical Function

A vulnerability in the development shell devshell authentication for Cisco Aironet Series Access Points APs running the Cisco AP-COS operating system could allow an authenticated, local attacker to access the development shell without proper authentication, which allows for root access to the...

Edge no prior knowledge of the exploit-vulnerability warning-the black bar safety net

The background set forth 2007 held so far, in the pwn2own contest, the browser is always the main event. Watch the game at the same time, I believe a lot of friends have been eager to try. But do you remember how many times full of confidence, last and all the time being put on hold? The article...

RSA Conference 2019: BleedingBit Flaws Continue to Plague Firms

UPDATE SAN FRANCISCO – Mobile key platform UniKey has patched vulnerabilities related to the infamous BleedingBit attack in its platform. BleedingBit is an issue in Bluetooth Low-Energy chips made by Texas Instruments and used in millions of wireless access points, which was disclosed in November...