CVE-2017-3831

A vulnerability in the web-based GUI of Cisco Mobility Express 1800 Series Access Points could allow an unauthenticated, remote attacker to bypass authentication. The attacker could be granted full administrator privileges. The vulnerability is due to improper implementation of authentication for accessing certain web pages using the GUI interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web interface of the affected system. A successful exploit could allow the attacker to bypass authentication and perform unauthorized configuration changes or issue control commands to the affected device. This vulnerability affects Cisco Mobility Express 1800 Series Access Points running a software version prior to 8.2.110.0. Cisco Bug IDs: CSCuy68219.

• CWE-264
• CWE-287

• http://www.securityfocus.com/bid/96909Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ap1800Vendor Advisory
• http://www.securityfocus.com/bid/96909Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ap1800Vendor Advisory

Published

Mar 15, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3825A vulnerability in the ICMP ingress packet processing of Cis…
• CVE-2017-3826A vulnerability in the Stream Control Transmission Protocol …
• CVE-2017-3827A vulnerability in the Multipurpose Internet Mail Extensions…
• CVE-2017-3828A vulnerability in the web-based management interface of Cis…
• CVE-2017-3829A vulnerability in the web-based management interface of Cis…
• CVE-2017-3830A vulnerability in an internal API of the Cisco Meeting Serv…
• CVE-2017-3832A vulnerability in the web management interface of Cisco Wir…7.5
• CVE-2017-3833A vulnerability in the web framework of Cisco Unified Commun…
• CVE-2017-3834A vulnerability in Cisco Aironet 1830 Series and Cisco Airon…9.8
• CVE-2017-3835A vulnerability in the sponsor portal of Cisco Identity Serv…
• CVE-2017-3836A vulnerability in the web framework Cisco Unified Communica…
• CVE-2017-3837An HTTP Packet Processing vulnerability in the Web Bridge in…