CVE-2019-1675 Cisco Aironet Active Sensor Static Credentials Vulnerability
An attacker can use static default credentials to repeatedly reboot the Cisco Aironet Active Sensor, causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-1675?
CVE-2019-1675 is a high-severity vulnerability in Cisco Aironet Active Sensor, published on 7 Feb 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the default configuration of the Cisco Aironet Active Sensor could allow an unauthenticated, remote attacker to restart the sensor. The vulnerability is due to a default local account with a static password. The account has privileges only to reboot the device. An attacker could exploit this vulnerability by guessing the account name and password to access the CLI. A successful exploit could allow the attacker to reboot the device repeatedly, creating a denial of service (DoS) condition. It is not possible to change the configuration or view sensitive data with this account. Versions prior to DNAC1.2.8 are affected.
Weakness: CWE-798
Which versions are affected by CVE-2019-1675?
It affects 2 products.
Products include Cisco Aironet Active Sensor, Cisco Digital Network Architecture Center.
How do I fix CVE-2019-1675?
No fix has been published for CVE-2019-1675 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-1675 being exploited?
There is no known exploitation of CVE-2019-1675 in the wild and no public exploit code.
Sources
Also known as GHSA-hprm-r4mh-xh3f.