{"id":9485,"date":"2019-11-04T01:24:35","date_gmt":"2019-11-04T01:24:35","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=9485"},"modified":"2019-11-04T01:24:35","modified_gmt":"2019-11-04T01:24:35","slug":"cisco-aironet-access-points-unauthorized-access-vulnerability-threat-alert","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/cisco-aironet-access-points-unauthorized-access-vulnerability-threat-alert\/","title":{"rendered":"Cisco Aironet Access Points Unauthorized Access Vulnerability Threat Alert"},"content":{"rendered":"

Overview<\/strong><\/h2>\n

On October 17, local time, Cisco issued a security notice claiming that an unauthorized access vulnerability to Aironet Access Points (APs) was fixed. The vulnerability stems from the fact that no specific URL is filtered. An attacker can obtain the access rights of the device by constructing a malicious URL and sending it to the affected AP to trigger the vulnerability. The attacker can then modify multiple configuration data of the AP and cause a denial of service attack.
\n<\/p>\n

CVSS 3.0 Base Rating: 9.8<\/p>\n

AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H\/E:X\/RL:X\/RC:X<\/p>\n

References:<\/p>\n

https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-20191016-airo-unauth-access<\/a><\/p>\n

Affected Versions<\/strong><\/h2>\n