CVE-2019-1805 (CNNVD-201904-854)
中文标题:
Cisco Wireless LAN Controller（WLC）Software 输入验证错误漏洞
英文标题:
Cisco Wireless LAN Controller Secure Shell Unauthorized Access Vulnerability
漏洞描述
中文描述:
Cisco Wireless LAN Controller（WLC）Software是美国思科（Cisco）公司的一套用于配置和管理WLC（无线局域网控制器）的软件。 Cisco WLC Software中的访问控制机制存在输入验证错误漏洞，该漏洞源于网络系统或产品未对输入的数据进行正确的验证。
英文描述:
A vulnerability in certain access control mechanisms for the Secure Shell (SSH) server implementation for Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to access a CLI instance on an affected device. The vulnerability is due to a lack of proper input- and validation-checking mechanisms for inbound SSH connections on an affected device. An attacker could exploit this vulnerability by attempting to establish an SSH connection to an affected controller. An exploit could allow the attacker to access an affected device's CLI to potentially cause further attacks. This vulnerability has been fixed in version 8.5(140.0).
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco Wireless LAN Controller (WLC) | - | < 8.5(140.0) | - |
cpe:2.3:a:cisco:cisco_wireless_lan_controller_(wlc):*:*:*:*:*:*:*:*
|
| cisco | wireless_lan_controller_software | 8.3\(141.0\) | - | - |
cpe:2.3:a:cisco:wireless_lan_controller_software:8.3\(141.0\):*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
3.0 (cna)
MEDIUMCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2019-1805 |
2025-11-11 15:20:08 | 2025-11-11 07:35:39 |
| NVD | nvd_CVE-2019-1805 |
2025-11-11 14:56:21 | 2025-11-11 07:44:10 |
| CNNVD | cnnvd_CNNVD-201904-854 |
2025-11-11 15:10:11 | 2025-11-11 07:54:29 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 输入验证错误
- cnnvd_id: 未提取 -> CNNVD-201904-854
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 1 -> 2
- data_sources: ['cve'] -> ['cve', 'nvd']