CVE-2019-1829

A vulnerability in the CLI of Cisco Aironet Series Access Points (APs) could allow an authenticated, local attacker to gain access to the underlying Linux operating system (OS) without the proper authentication. The attacker would need valid administrator device credentials. The vulnerability is due to improper validation of user-supplied input for certain CLI commands. An attacker could exploit this vulnerability by authenticating to an affected device and submitting crafted input for a CLI command. A successful exploit could allow the attacker to obtain access to the underlying Linux OS without proper authentication.

• CWE-16
• CWE-78

• http://www.securityfocus.com/bid/107990Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-air-ap-cmdinjVendor Advisory
• http://www.securityfocus.com/bid/107990Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-air-ap-cmdinjVendor Advisory

Published

Apr 18, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18284A vulnerability has been identified in SPPA-T3000 Applicatio…9.8
• CVE-2019-18285A vulnerability has been identified in SPPA-T3000 Applicatio…5.9
• CVE-2019-18286A vulnerability has been identified in SPPA-T3000 Applicatio…5.3
• CVE-2019-18287A vulnerability has been identified in SPPA-T3000 Applicatio…5.3
• CVE-2019-18288A vulnerability has been identified in SPPA-T3000 Applicatio…8.8
• CVE-2019-18289A vulnerability has been identified in SPPA-T3000 MS3000 Mig…9.8
• CVE-2019-18290A vulnerability has been identified in SPPA-T3000 MS3000 Mig…7.5
• CVE-2019-18291A vulnerability has been identified in SPPA-T3000 MS3000 Mig…7.5
• CVE-2019-18292A vulnerability has been identified in SPPA-T3000 MS3000 Mig…7.5
• CVE-2019-18293A vulnerability has been identified in SPPA-T3000 MS3000 Mig…9.8
• CVE-2019-18294A vulnerability has been identified in SPPA-T3000 MS3000 Mig…7.5
• CVE-2019-18295A vulnerability has been identified in SPPA-T3000 MS3000 Mig…9.8