CVE-2017-3834 (CNNVD-201704-278)
中文标题:
Cisco Aironet 1830 Series和Cisco Aironet 1850 Series Access Points Mobility Express Software 信任管理问题漏洞
英文标题:
A vulnerability in Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points running Cis...
漏洞描述
中文描述:
Cisco Aironet 1830 Series和Cisco Aironet 1850 Series Access Points都是美国思科（Cisco）公司的产品。前者是一款路由器；后者是一款无线接入点产品。Mobility Express Software是其中的一个无线网络解决方案。 Cisco Aironet 1830 Series和Cisco Aironet 1850 Series Access Points中的Mobility Express Software 8.2.111.0之前的8.2.x版本中存在安全漏洞，该漏洞源于程序中存在默认证书。远程攻击者可通过使用Secure Shell (SSH)利用该漏洞以提升的权限登录设备。
英文描述:
A vulnerability in Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points running Cisco Mobility Express Software could allow an unauthenticated, remote attacker to take complete control of an affected device. The vulnerability is due to the existence of default credentials for an affected device that is running Cisco Mobility Express Software, regardless of whether the device is configured as a master, subordinate, or standalone access point. An attacker who has layer 3 connectivity to an affected device could use Secure Shell (SSH) to log in to the device with elevated privileges. A successful exploit could allow the attacker to take complete control of the device. This vulnerability affects Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points that are running an 8.2.x release of Cisco Mobility Express Software prior to Release 8.2.111.0, regardless of whether the device is configured as a master, subordinate, or standalone access point. Release 8.2 was the first release of Cisco Mobility Express Software for next generation Cisco Aironet Access Points. Cisco Bug IDs: CSCva50691.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| cisco | aironet_access_point_firmware | 8.2.100.0 | - | - |
cpe:2.3:o:cisco:aironet_access_point_firmware:8.2.100.0:*:*:*:*:*:*:*
|
| cisco | aironet_access_point_firmware | 8.2.102.43 | - | - |
cpe:2.3:o:cisco:aironet_access_point_firmware:8.2.102.43:*:*:*:*:*:*:*
|
| cisco | aironet_access_point_firmware | 8.2.102.139 | - | - |
cpe:2.3:o:cisco:aironet_access_point_firmware:8.2.102.139:*:*:*:*:*:*:*
|
| cisco | aironet_access_point_firmware | 8.2.111.0 | - | - |
cpe:2.3:o:cisco:aironet_access_point_firmware:8.2.111.0:*:*:*:*:*:*:*
|
| cisco | aironet_access_point_firmware | 8.2.121.12 | - | - |
cpe:2.3:o:cisco:aironet_access_point_firmware:8.2.121.12:*:*:*:*:*:*:*
|
| cisco | aironet_access_point_firmware | 8.2.130.0 | - | - |
cpe:2.3:o:cisco:aironet_access_point_firmware:8.2.130.0:*:*:*:*:*:*:*
|
| cisco | aironet_access_point_firmware | 90.57 | - | - |
cpe:2.3:o:cisco:aironet_access_point_firmware:90.57:*:*:*:*:*:*:*
|
| cisco | aironet_access_point_firmware | 102.0 | - | - |
cpe:2.3:o:cisco:aironet_access_point_firmware:102.0:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2017-3834 |
2025-11-11 15:19:27 | 2025-11-11 07:34:47 |
| NVD | nvd_CVE-2017-3834 |
2025-11-11 14:55:27 | 2025-11-11 07:43:24 |
| CNNVD | cnnvd_CNNVD-201704-278 |
2025-11-11 15:09:47 | 2025-11-11 07:52:59 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 信任管理问题
- cnnvd_id: 未提取 -> CNNVD-201704-278
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- severity: SeverityLevel.MEDIUM -> SeverityLevel.CRITICAL
- cvss_score: 未提取 -> 9.8
- cvss_vector: NOT_EXTRACTED -> CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- cvss_version: NOT_EXTRACTED -> 3.1
- affected_products_count: 0 -> 8
- data_sources: ['cve'] -> ['cve', 'nvd']