CVE-2019-1835

A vulnerability in the CLI of Cisco Aironet Access Points (APs) could allow an authenticated, local attacker to access sensitive information stored in an AP. The vulnerability is due to improper sanitization of user-supplied input in specific CLI commands. An attacker could exploit this vulnerability by accessing the CLI of an affected AP with administrator privileges and issuing crafted commands that result in directory traversal. A successful exploit could allow the attacker to view system files on the affected device, which could contain sensitive information. Software versions 8.8 and 8.9 are affected.

• CWE-22
• CWE-22

• http://www.securityfocus.com/bid/108001Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-air-ap-traversalVendor Advisory
• http://www.securityfocus.com/bid/108001Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-air-ap-traversalVendor Advisory

Published

Apr 18, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18344Sourcecodester Online Grading System 1.0 is vulnerable to un…9.8
• CVE-2019-18345A reflected XSS issue was discovered in DAViCal through 1.1.…9.3
• CVE-2019-18346A CSRF issue was discovered in DAViCal through 1.1.8. If an …8.8
• CVE-2019-18347A stored XSS issue was discovered in DAViCal through 1.1.8. …5.4
• CVE-2019-18348An issue was discovered in urllib2 in Python 2.x through 2.7…6.1
• CVE-2019-18349HotkeyP through 4.9 r96 allows privilege escalation in the p…9.8
• CVE-2019-18350In Ant Design Pro 4.0.0, reflected XSS in the user/login red…6.1
• CVE-2019-18351Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-18352Improper access control exists on PHOENIX CONTACT FL NAT 220…8.2
• CVE-2019-18355An SSRF issue was discovered in the legacy Web launcher in T…9.8
• CVE-2019-18356An XSS issue was discovered in Thycotic Secret Server before…6.1
• CVE-2019-18357An XSS issue was discovered in Thycotic Secret Server before…6.1