CVE-2019-1654

A vulnerability in the development shell (devshell) authentication for Cisco Aironet Series Access Points (APs) running the Cisco AP-COS operating system could allow an authenticated, local attacker to access the development shell without proper authentication, which allows for root access to the underlying Linux OS. The attacker would need valid device credentials. The vulnerability exists because the software improperly validates user-supplied input at the CLI authentication prompt for development shell access. An attacker could exploit this vulnerability by authenticating to the device and entering crafted input at the CLI. A successful exploit could allow the attacker to access the AP development shell without proper authentication, which allows for root access to the underlying Linux OS. Software versions prior to 8.3.150.0, 8.5.135.0, and 8.8.100.0 are affected.

• CWE-255
• CWE-306

• http://www.securityfocus.com/bid/107991Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-aironet-shellVendor Advisory
• http://www.securityfocus.com/bid/107991Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-aironet-shellVendor Advisory

Published

Apr 17, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16533On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrec…6.1
• CVE-2019-16534On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exis…6.1
• CVE-2019-16535In all versions of ClickHouse before 19.14, an OOB read, OOB…9.8
• CVE-2019-16536Stack overflow leading to DoS can be triggered by a maliciou…8.8
• CVE-2019-16538A sandbox bypass vulnerability in Jenkins Script Security Pl…8.8
• CVE-2019-16539A missing permission check in Jenkins Support Core Plugin 2.…6.5
• CVE-2019-16540A path traversal vulnerability in Jenkins Support Core Plugi…6.5
• CVE-2019-16541Jenkins JIRA Plugin 3.0.10 and earlier does not declare the …9.9
• CVE-2019-16542Jenkins Anchore Container Image Scanner Plugin 1.0.19 and ea…6.5
• CVE-2019-16543Jenkins Spira Importer Plugin 3.2.2 and earlier stores crede…5.5
• CVE-2019-16544Jenkins QMetry for JIRA - Test Management Plugin 1.12 and ea…8.8
• CVE-2019-16545Jenkins QMetry for JIRA - Test Management Plugin transmits c…6.5