cisco-sa-20190417-wlc-ssh: Cisco Wireless LAN Controller Secure Shell Unauthorized Access Vulnerability
A vulnerability in certain access control mechanisms for the Secure Shell (SSH) server implementation for Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to access a CLI instance on an affected device.
The vulnerability is due to a lack of proper input- and validation-checking mechanisms for inbound SSH connections on an affected device. An attacker could exploit this vulnerability by attempting to establish an SSH connection to an affected controller. An exploit could allow the attacker to access an affected device's CLI to potentially cause further attacks. There are no workarounds that address this vulnerability.
This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-wlc-ssh
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20190417-wlc-ssh?
The severity of cisco-sa-20190417-wlc-ssh is rated as high due to the potential for unauthenticated access to the CLI of affected devices.
How do I fix cisco-sa-20190417-wlc-ssh?
To fix cisco-sa-20190417-wlc-ssh, upgrade to the latest version of Cisco Wireless LAN Controller Software that addresses the vulnerability.
Who is affected by cisco-sa-20190417-wlc-ssh?
Cisco Wireless LAN Controller devices with specific SSH configurations are affected by cisco-sa-20190417-wlc-ssh.
What type of attack does cisco-sa-20190417-wlc-ssh enable?
cisco-sa-20190417-wlc-ssh enables adjacent attackers to gain unauthorized access to the command-line interface of affected Cisco devices.
Is there a workaround for cisco-sa-20190417-wlc-ssh?
Yes, a workaround for cisco-sa-20190417-wlc-ssh involves implementing stricter access control measures on the SSH service.