CVE-2019-1805

Cisco Wireless LAN Controller Secure Shell Unauthorized Access Vulnerability

State: Published
Severity: 5.4 Medium
Published: Apr 18, 2019
Updated: Nov 21, 2024
Reserved: Dec 6, 2018

Description

A vulnerability in certain access control mechanisms for the Secure Shell (SSH) server implementation for Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to access a CLI instance on an affected device. The vulnerability is due to a lack of proper input- and validation-checking mechanisms for inbound SSH connections on an affected device. An attacker could exploit this vulnerability by attempting to establish an SSH connection to an affected controller. An exploit could allow the attacker to access an affected device's CLI to potentially cause further attacks. This vulnerability has been fixed in version 8.5(140.0).

Scores

CVSS	Score	Vector	Source
3.0	5.4 Medium	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N	cisco

Weaknesses

CWE-284

Affected Products

Product	Versions
Cisco Wireless LAN Controller (WLC)Cisco	before 8.5(140.0)Affected

References

20190417 Cisco Wireless LAN Controller Secure Shell Unauthorized Access Vulnerabilityvendor-advisory
108003vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.