CVE-2019-1829 : A vulnerability in the CLI of Cisco Aironet Series Access Points (APs) could all

A vulnerability in the CLI of Cisco Aironet Series Access Points (APs) could allow an authenticated, local attacker to gain access to the underlying Linux operating system (OS) without the proper authentication. The attacker would need valid administrator device credentials. The vulnerability is due to improper validation of user-supplied input for certain CLI commands. An attacker could exploit this vulnerability by authenticating to an affected device and submitting crafted input for a CLI command. A successful exploit could allow the attacker to obtain access to the underlying Linux OS without proper authentication.

Published 2019-04-18 02:29:06

Updated 2020-10-16 17:39:50

Source Cisco Systems, Inc.

View at NVD, CVE.org

Products affected by CVE-2019-1829

Cisco » Aironet Access Point Firmware
Versions from including (>=) 8.5 and before (<) 8.5.140.0
cpe:2.3:o:cisco:aironet_access_point_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Aironet 1542d » Version: N/A
When used together with: Cisco » Aironet 1542i » Version: N/A
When used together with: Cisco » Aironet 1562d » Version: N/A
When used together with: Cisco » Aironet 1562e » Version: N/A
When used together with: Cisco » Aironet 1562i » Version: N/A
When used together with: Cisco » Aironet 1800i » Version: N/A
When used together with: Cisco » Aironet 2800e » Version: N/A
When used together with: Cisco » Aironet 2800i » Version: N/A
When used together with: Cisco » Aironet 3800e » Version: N/A
When used together with: Cisco » Aironet 3800i » Version: N/A
When used together with: Cisco » Aironet 3800p » Version: N/A
Cisco » Aironet Access Point Firmware
Versions from including (>=) 8.6.101.0 and before (<) 8.8.111.0
cpe:2.3:o:cisco:aironet_access_point_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Aironet 1542d » Version: N/A
When used together with: Cisco » Aironet 1542i » Version: N/A
When used together with: Cisco » Aironet 1562d » Version: N/A
When used together with: Cisco » Aironet 1562e » Version: N/A
When used together with: Cisco » Aironet 1562i » Version: N/A
When used together with: Cisco » Aironet 1800i » Version: N/A
When used together with: Cisco » Aironet 2800e » Version: N/A
When used together with: Cisco » Aironet 2800i » Version: N/A
When used together with: Cisco » Aironet 3800e » Version: N/A
When used together with: Cisco » Aironet 3800i » Version: N/A
When used together with: Cisco » Aironet 3800p » Version: N/A
Cisco » Aironet Access Point Firmware
Versions before (<) 8.3.150.0
cpe:2.3:o:cisco:aironet_access_point_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Aironet 1542d » Version: N/A
When used together with: Cisco » Aironet 1542i » Version: N/A
When used together with: Cisco » Aironet 1562d » Version: N/A
When used together with: Cisco » Aironet 1562e » Version: N/A
When used together with: Cisco » Aironet 1562i » Version: N/A
When used together with: Cisco » Aironet 1800i » Version: N/A
When used together with: Cisco » Aironet 2800e » Version: N/A
When used together with: Cisco » Aironet 2800i » Version: N/A
When used together with: Cisco » Aironet 3800e » Version: N/A
When used together with: Cisco » Aironet 3800i » Version: N/A
When used together with: Cisco » Aironet 3800p » Version: N/A
Cisco » Aironet Access Point Firmware » Version: 8.5(131.0)
cpe:2.3:o:cisco:aironet_access_point_firmware:8.5\(131.0\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Aironet 1850e » Version: N/A
When used together with: Cisco » Aironet 1850i » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2019-1829

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-1829

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
6.7	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	0.8	5.9	Cisco Systems, Inc.
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	0.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2019-1829

CWE-16

Assigned by: ykramarz@cisco.com (Secondary)
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2019-1829

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-air-ap-cmdinj

Cisco Aironet Series Access Points Command Injection Vulnerability
Vendor Advisory
http://www.securityfocus.com/bid/107990

Cisco Aironet Series Access Points CVE-2019-1829 Local Command Injection Vulnerability
Third Party Advisory;VDB Entry

Jump to

Vulnerability Details : CVE-2019-1829

Products affected by CVE-2019-1829

Exploit prediction scoring system (EPSS) score for CVE-2019-1829

CVSS scores for CVE-2019-1829

CWE ids for CVE-2019-1829

References for CVE-2019-1829