cisco-sa-20190417-air-ap-traversal: Cisco Aironet Series Access Points Directory Traversal Vulnerability
A vulnerability in the CLI of Cisco Aironet Access Points (APs) could allow an authenticated, local attacker to access sensitive information stored in an AP. The vulnerability is due to improper sanitization of user-supplied input in specific CLI commands. An attacker could exploit this vulnerability by accessing the CLI of an affected AP with administrator privileges and issuing crafted commands that result in directory traversal. A successful exploit could allow the attacker to view system files on the affected device, which could contain sensitive information. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-air-ap-traversal
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20190417-air-ap-traversal?
The severity of cisco-sa-20190417-air-ap-traversal is classified as high due to the potential access to sensitive information.
How do I fix cisco-sa-20190417-air-ap-traversal?
To fix cisco-sa-20190417-air-ap-traversal, update your Cisco Aironet Access Points to the latest available firmware version.
Who is affected by cisco-sa-20190417-air-ap-traversal?
Cisco Aironet Access Points that allow access to the command-line interface are affected by cisco-sa-20190417-air-ap-traversal.
What type of attacker can exploit cisco-sa-20190417-air-ap-traversal?
An authenticated, local attacker can exploit cisco-sa-20190417-air-ap-traversal to access sensitive information.
What causes cisco-sa-20190417-air-ap-traversal?
cisco-sa-20190417-air-ap-traversal is caused by improper sanitization of user-supplied input in specific CLI commands.