Cisco Aironet Access Point Firmware vulnerabilities

6 CVEs affecting Cisco Aironet Access Point Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-1835, published 2019-04-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-3834, published 2017-04-06. Critical severity, CVSS 9.8. EPSS: 4.5% chance of exploitation in the next 30 days. A vulnerability in Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points running Cisco Mobility Express Software could allow an unauthenticated, remote attacker to take complete…
CVE-2019-1835, published 2019-04-18. Medium severity, CVSS 4.4. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco Aironet Access Points (APs) could allow an authenticated, local attacker to access sensitive information stored in an AP. The vulnerability is due to improper…
CVE-2017-3873, published 2017-05-16. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the Plug-and-Play (PnP) subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points running a Lightweight Access Point (AP) or Mobility Express image could allow an…
CVE-2019-1834, published 2019-04-18. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the internal packet processing of Cisco Aironet Series Access Points (APs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an…
CVE-2019-1826, published 2019-04-18. Medium severity, CVSS 5.7. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the quality of service (QoS) feature of Cisco Aironet Series Access Points (APs) could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an…
CVE-2019-1829, published 2019-04-18. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco Aironet Series Access Points (APs) could allow an authenticated, local attacker to gain access to the underlying Linux operating system (OS) without the proper…