CVE-2017-3834: Critical severity Cisco Aironet Access Point Firmware vulnerability

Published Apr 6, 2017
·
Updated

A vulnerability in Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points running Cisco Mobility Express Software could allow an unauthenticated, remote attacker to take complete control of an affected device. The vulnerability is due to the existence of default credentials for an affected device that is running Cisco Mobility Express Software, regardless of whether the device is configured as a master, subordinate, or standalone access point. An attacker who has layer 3 connectivity to an affected device could use Secure Shell (SSH) to log in to the device with elevated privileges. A successful exploit could allow the attacker to take complete control of the device. This vulnerability affects Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points that are running an 8.2.x release of Cisco Mobility Express Software prior to Release 8.2.111.0, regardless of whether the device is configured as a master, subordinate, or standalone access point. Release 8.2 was the first release of Cisco Mobility Express Software for next generation Cisco Aironet Access Points. Cisco Bug IDs: CSCva50691.

Affected Software

22 affected components
Cisco Aironet Access Point Firmware=8.2.100.0
Cisco Aironet Access Point Firmware=8.2.102.43
Cisco Aironet Access Point Firmware=8.2.102.139
Cisco Aironet Access Point Firmware=8.2.111.0
Cisco Aironet Access Point Firmware=8.2.121.12
Cisco Aironet Access Point Firmware=8.2.130.0
Cisco Aironet Access Point Firmware=90.57
Cisco Aironet Access Point Firmware=102.0
Cisco Aironet 1830i Access Point
Cisco Aironet 1850e Access Point
Cisco Aironet 1850i Access Point
All of the following
Any of the following
Cisco Aironet Access Point Firmware=8.2.100.0
Cisco Aironet Access Point Firmware=8.2.102.43
Cisco Aironet Access Point Firmware=8.2.102.139
Cisco Aironet Access Point Firmware=8.2.111.0
Cisco Aironet Access Point Firmware=8.2.121.12
Cisco Aironet Access Point Firmware=8.2.130.0
Cisco Aironet Access Point Firmware=90.57
Cisco Aironet Access Point Firmware=102.0
Any of the following
Cisco Aironet 1830i Access Point
Cisco Aironet 1850e Access Point
Cisco Aironet 1850i Access Point

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade Cisco Mobility Express Software (Cisco Aironet 1830/1850) to a version that resolves this vulnerability.

    Fixed in 8.2.111.0Patch CSCva50691
  2. Compensating control

    Ensure that default credentials are changed/removed for Cisco Aironet 1830/1850 Access Points running Cisco Mobility Express Software (applies regardless of master, subordinate, or standalone configuration).

Event History

Apr 6, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Data Sourced
via NVD·06:59 PM
DescriptionSeverityWeaknessAffected Software
Jun 19, 58461
Event
05:08 AM
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2017-3834?

CVE-2017-3834 is considered a critical vulnerability.

2

How do I fix CVE-2017-3834?

To fix CVE-2017-3834, change the default credentials and update to the latest firmware version recommended by Cisco.

3

Which devices are affected by CVE-2017-3834?

CVE-2017-3834 affects Cisco Aironet 1830 Series and 1850 Series Access Points running certain versions of Cisco Mobility Express Software.

4

Can CVE-2017-3834 be exploited remotely?

Yes, CVE-2017-3834 can be exploited by unauthenticated remote attackers.

5

What causes the vulnerability in CVE-2017-3834?

The vulnerability in CVE-2017-3834 is due to the presence of default credentials for device access.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203