CVE-2019-1835 (CNNVD-201904-825)
中文标题:
多款Cisco产品路径遍历漏洞
英文标题:
Cisco Aironet Series Access Points Directory Traversal Vulnerability
漏洞描述
中文描述:
Cisco Aironet 1540 Series APs等都是美国思科（Cisco）公司的产品。Cisco Aironet 1540 Series APs是一款1540系列访问接入点产品。Cisco Aironet 1560 Series APs是一款1560系列访问接入点产品。Cisco Aironet 1800 Series APs是一款1800系列访问接入点产品。 多款Cisco产品中的CLI存在路径遍历漏洞，该漏洞源于网络系统或产品未能正确地过滤资源或文件路径中的特殊元素。攻击者可利用该漏洞访问受限目录之外的位置。以下产品受到影响：Cisco Aironet 1540 Series APs；Aironet 1560 Series APs；Aironet 1800 Series APs；Aironet 2800 Series APs；Aironet 3800 Series APs。
英文描述:
A vulnerability in the CLI of Cisco Aironet Access Points (APs) could allow an authenticated, local attacker to access sensitive information stored in an AP. The vulnerability is due to improper sanitization of user-supplied input in specific CLI commands. An attacker could exploit this vulnerability by accessing the CLI of an affected AP with administrator privileges and issuing crafted commands that result in directory traversal. A successful exploit could allow the attacker to view system files on the affected device, which could contain sensitive information. Software versions 8.8 and 8.9 are affected.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco Aironet Access Point Software | 8.8 | - | - |
cpe:2.3:a:cisco:cisco_aironet_access_point_software:8.8:*:*:*:*:*:*:*
|
| Cisco | Cisco Aironet Access Point Software | 8.9 | - | - |
cpe:2.3:a:cisco:cisco_aironet_access_point_software:8.9:*:*:*:*:*:*:*
|
| cisco | aironet_access_point_firmware | 8.8 | - | - |
cpe:2.3:o:cisco:aironet_access_point_firmware:8.8:*:*:*:*:*:*:*
|
| cisco | aironet_access_point_firmware | 8.9 | - | - |
cpe:2.3:o:cisco:aironet_access_point_firmware:8.9:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
3.0 (cna)
MEDIUMCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2019-1835 |
2025-11-11 15:20:08 | 2025-11-11 07:35:39 |
| NVD | nvd_CVE-2019-1835 |
2025-11-11 14:56:21 | 2025-11-11 07:44:10 |
| CNNVD | cnnvd_CNNVD-201904-825 |
2025-11-11 15:10:11 | 2025-11-11 07:54:29 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 路径遍历
- cnnvd_id: 未提取 -> CNNVD-201904-825
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 2 -> 4
- data_sources: ['cve'] -> ['cve', 'nvd']