CVE-2019-1675

A vulnerability in the default configuration of the Cisco Aironet Active Sensor could allow an unauthenticated, remote attacker to restart the sensor. The vulnerability is due to a default local account with a static password. The account has privileges only to reboot the device. An attacker could exploit this vulnerability by guessing the account name and password to access the CLI. A successful exploit could allow the attacker to reboot the device repeatedly, creating a denial of service (DoS) condition. It is not possible to change the configuration or view sensitive data with this account. Versions prior to DNAC1.2.8 are affected.

• CWE-798
• CWE-798

• http://www.securityfocus.com/bid/106944Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190206-aas-credsVendor Advisory
• http://www.securityfocus.com/bid/106944Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190206-aas-credsVendor Advisory

Published

Feb 7, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16743eBrigade before 5.0 has evenement_ical.php evenement SQL Inj…8.8
• CVE-2019-16744eBrigade before 5.0 has evenements.php cid SQL Injection.8.8
• CVE-2019-16745eBrigade before 5.0 has evenement_choice.php chxCal SQL Inje…8.8
• CVE-2019-16746An issue was discovered in net/wireless/nl80211.c in the Lin…9.8
• CVE-2019-16747In MatrixSSL before 4.2.2 Open, the DTLS server can encounte…7.5
• CVE-2019-16748In wolfSSL through 4.1.0, there is a missing sanity check of…9.8
• CVE-2019-16751An issue was discovered in Devise Token Auth through 1.1.2. …6.1
• CVE-2019-16752An issue was discovered in Decentralized Anonymous Payment S…4.3
• CVE-2019-16753An issue was discovered in Decentralized Anonymous Payment S…7.5
• CVE-2019-16754RIOT 2019.07 contains a NULL pointer dereference in the MQTT…7.5
• CVE-2019-16755BMC Remedy ITSM Suite is prone to unspecified vulnerabilitie…9.8
• CVE-2019-16758In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port…7.5