Strix
26.1K

CVE-2019-1830

UnknownEPSS 1.23%

Last modified

CVE-2019-1830 is a vulnerability of currently unknown severity. A vulnerability in Locally Significant Certificate (LSC) management for the Cisco Wireless LAN Controller (WLC) could allow an authenticated, remote attacker to cause the device to unexpectedly restart, which causes a denial of service (DoS) condition. The attacker would need to have valid administrator credentials. EPSS estimates a 1.23% chance of exploitation in the next 30 days.

Description

A vulnerability in Locally Significant Certificate (LSC) management for the Cisco Wireless LAN Controller (WLC) could allow an authenticated, remote attacker to cause the device to unexpectedly restart, which causes a denial of service (DoS) condition. The attacker would need to have valid administrator credentials. The vulnerability is due to incorrect input validation of the HTTP URL used to establish a connection to the LSC Certificate Authority (CA). An attacker could exploit this vulnerability by authenticating to the targeted device and configuring a LSC certificate. An exploit could allow the attacker to cause a DoS condition due to an unexpected restart of the device.

Metrics

EPSS Probability
1.23%

65.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
CiscoWireless Lan Controller Software< 8.3.150.0
CiscoWireless Lan Controller Software>= 8.5.131.0, < 8.5.140.0
CiscoWireless Lan Controller Software>= 8.6.101.0, < 8.8.100.0

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2019-1830?
A vulnerability in Locally Significant Certificate (LSC) management for the Cisco Wireless LAN Controller (WLC) could allow an authenticated, remote attacker to cause the device to unexpectedly restart, which causes a denial of service (DoS) condition. The attacker would need to have valid administrator credentials. The vulnerability is due to incorrect input validation of the HTTP URL used to establish a connection to the LSC Certificate Authority (CA). An attacker could exploit this vulnerability by authenticating to the targeted device and configuring a LSC certificate. An exploit could allow the attacker to cause a DoS condition due to an unexpected restart of the device.
How severe is CVE-2019-1830?
Severity scoring for CVE-2019-1830 is pending analysis. The EPSS model estimates a 1.23% probability of exploitation in the next 30 days.
How do I fix CVE-2019-1830?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-1830?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST