Vulnerabilities > Cisco > Aironet 1850E

DATE CVE VULNERABILITY TITLE RISK
2019-04-18 CVE-2019-1829 OS Command Injection vulnerability in Cisco Aironet Access Point Firmware
A vulnerability in the CLI of Cisco Aironet Series Access Points (APs) could allow an authenticated, local attacker to gain access to the underlying Linux operating system (OS) without the proper authentication.
local
low complexity
cisco CWE-78
7.2
2017-11-02 CVE-2017-12281 Improper Authentication vulnerability in Cisco products
A vulnerability in the implementation of Protected Extensible Authentication Protocol (PEAP) functionality for standalone configurations of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an unauthenticated, adjacent attacker to bypass authentication and connect to an affected device.
5.4
2017-05-16 CVE-2017-3873 Improper Input Validation vulnerability in Cisco Aironet Access Point Firmware 8.3102.0
A vulnerability in the Plug-and-Play (PnP) subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points running a Lightweight Access Point (AP) or Mobility Express image could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges.
7.9
2017-03-15 CVE-2017-3831 Improper Authentication vulnerability in Cisco Aironet Access Point Software
A vulnerability in the web-based GUI of Cisco Mobility Express 1800 Series Access Points could allow an unauthenticated, remote attacker to bypass authentication.
network
low complexity
cisco CWE-287
critical
10.0
2016-06-08 CVE-2016-1418 Improper Input Validation vulnerability in Cisco Aironet Access Point Software 8.2(100.0)
Cisco Aironet Access Point Software 8.2(100.0) on 1830e, 1830i, 1850e, 1850i, 2800, and 3800 access points allows local users to obtain Linux root access via crafted CLI command parameters, aka Bug ID CSCuy64037.
local
low complexity
cisco CWE-20
7.2
2016-01-15 CVE-2015-6336 Credentials Management vulnerability in Cisco Aironet Access Point Software
Cisco Aironet 1800 devices with software 7.2, 7.3, 7.4, 8.1(112.3), 8.1(112.4), and 8.1(15.14) have a default account, which makes it easier for remote attackers to obtain access via unspecified vectors, aka Bug ID CSCuw58062.
network
low complexity
cisco CWE-255
7.5
2016-01-15 CVE-2015-6320 Resource Management Errors vulnerability in Cisco Aironet Access Point Software 8.1(112.3)/8.1(112.4)
The IP ingress packet handler on Cisco Aironet 1800 devices with software 8.1(112.3) and 8.1(112.4) allows remote attackers to cause a denial of service via a crafted header in an IP packet, aka Bug ID CSCuv63138.
network
low complexity
cisco CWE-399
7.8