CVE-2019-1654: cisco ap-cos Credentials Management Errors

Vulnerability summary

CVE-2019-1654 is a high (CVSS 7.8) Credentials Management Errors vulnerability in cisco ap-cos. EPSS estimates a 0.39% chance of exploitation in the next 30 days, higher than 31.8% of scored vulnerabilities.

Timeline

1. 17-04-2019
   PublishedVulnerability first disclosed.
2. 20-11-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability in the development shell (devshell) authentication for Cisco Aironet Series Access Points (APs) running the Cisco AP-COS operating system could allow an authenticated, local attacker to access the development shell without proper authentication, which allows for root access to the underlying Linux OS. The attacker would need valid device credentials. The vulnerability exists because the software improperly validates user-supplied input at the CLI authentication prompt for development shell access. An attacker could exploit this vulnerability by authenticating to the device and entering crafted input at the CLI. A successful exploit could allow the attacker to access the AP development shell without proper authentication, which allows for root access to the underlying Linux OS. Software versions prior to 8.3.150.0, 8.5.135.0, and 8.8.100.0 are affected.

• CWE-255Credentials Management ErrorsWeaknesses in this category are related to the management of credentials.
• CWE-306Missing Authentication for Critical FunctionThe product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.