CVE-2019-1834

A vulnerability in the internal packet processing of Cisco Aironet Series Access Points (APs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected AP if the switch interface where the AP is connected has port security configured. The vulnerability exists because the AP forwards some malformed wireless client packets outside of the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel. An attacker could exploit this vulnerability by sending crafted wireless packets to an affected AP. A successful exploit could allow the attacker to trigger a security violation on the adjacent switch port, which could result in a DoS condition. Note: Though the Common Vulnerability Scoring System (CVSS) score corresponds to a High Security Impact Rating (SIR), this vulnerability is considered Medium because a workaround is available and exploitation requires a specific switch configuration. There are workarounds that address this vulnerability.

• CWE-20
• CWE-20

• http://www.securityfocus.com/bid/108000Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-air-ap-dosVendor Advisory
• http://www.securityfocus.com/bid/108000Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-air-ap-dosVendor Advisory

Published

Apr 18, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18334A vulnerability has been identified in SPPA-T3000 Applicatio…5.3
• CVE-2019-18335A vulnerability has been identified in SPPA-T3000 Applicatio…5.3
• CVE-2019-18336A vulnerability has been identified in SIMATIC S7-300 CPU fa…7.5
• CVE-2019-18337A vulnerability has been identified in Control Center Server…9.8
• CVE-2019-18338A vulnerability has been identified in Control Center Server…7.7
• CVE-2019-18339A vulnerability has been identified in SiNVR/SiVMS Video Ser…9.8
• CVE-2019-18340A vulnerability has been identified in Control Center Server…5.5
• CVE-2019-18341A vulnerability has been identified in Control Center Server…5.3
• CVE-2019-18342A vulnerability has been identified in Control Center Server…9.9
• CVE-2019-18344Sourcecodester Online Grading System 1.0 is vulnerable to un…9.8
• CVE-2019-18345A reflected XSS issue was discovered in DAViCal through 1.1.…9.3
• CVE-2019-18346A CSRF issue was discovered in DAViCal through 1.1.8. If an …8.8