CVE-2019-1805: Cisco Wireless LAN Controller Secure Shell Unauthorized Access Vulnerability
First published: Wed Apr 17 2019(Updated: )
A vulnerability in certain access control mechanisms for the Secure Shell (SSH) server implementation for Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to access a CLI instance on an affected device. The vulnerability is due to a lack of proper input- and validation-checking mechanisms for inbound SSH connections on an affected device. An attacker could exploit this vulnerability by attempting to establish an SSH connection to an affected controller. An exploit could allow the attacker to access an affected device's CLI to potentially cause further attacks. This vulnerability has been fixed in version 8.5(140.0).
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Wireless LAN Controller Software | =8.3\(141.0\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-1805.
What is the severity of CVE-2019-1805?
The severity of CVE-2019-1805 is medium with a severity value of 4.3.
What is the affected software for CVE-2019-1805?
The affected software for CVE-2019-1805 is Cisco Wireless LAN Controller Software version 8.3(141.0).
How can an attacker exploit CVE-2019-1805?
An unauthenticated, adjacent attacker can exploit CVE-2019-1805 to access a CLI instance on an affected device.
Is there a fix available for CVE-2019-1805?
Yes, Cisco has provided a fix for CVE-2019-1805. Please refer to the Cisco Security Advisory for more information.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/tags
- agent/first-publish-date
- agent/description
- agent/event
- vendor/cisco
- canonical/cisco wireless lan controller software
- version/cisco wireless lan controller software/8.3\(141.0\)