CVE-2019-1805 is a vulnerability in Cisco Wireless Lan Controller Software
Published on April 18, 2019
Cisco Wireless LAN Controller Secure Shell Unauthorized Access Vulnerability
A vulnerability in certain access control mechanisms for the Secure Shell (SSH) server implementation for Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to access a CLI instance on an affected device. The vulnerability is due to a lack of proper input- and validation-checking mechanisms for inbound SSH connections on an affected device. An attacker could exploit this vulnerability by attempting to establish an SSH connection to an affected controller. An exploit could allow the attacker to access an affected device's CLI to potentially cause further attacks. This vulnerability has been fixed in version 8.5(140.0).
Weakness Type
What is an Authorization Vulnerability?
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVE-2019-1805 has been classified to as an Authorization vulnerability or weakness.
Products Associated with CVE-2019-1805
Want to know whenever a new CVE is published for Cisco Wireless Lan Controller Software? stack.watch will email you.
Affected Versions
Cisco Wireless LAN Controller (WLC):- Version unspecified and below 8.5(140.0) is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.