Cisco: These Wi-Fi access points are easily owned by remote hackers, so patch now

guest · Oct 17, 2019

Cisco: These Wi-Fi access points are easily owned by remote hackers, so patch now
Cisco is urging customers with Aironet Wi-Fi access points to address four separate security flaws
October 17, 2019
https://www.zdnet.com/article/cisco...-easily-owned-by-remote-hackers-so-patch-now/

Hackers from afar can mess around with Cisco's Aironet industrial and business Wi-Fi access points because the devices have flawed URL access controls, Cisco has warned customers.
The critical Aironet flaw has been assigned the identified CVE-2019-15260 and has a CVSS v3 score of 9.8 out of 10.

Cisco hasn't divulged much information about the flaw, but the company admits that affected Aironet Wi-Fi boxes don't currently implement sufficiently strong access controls for "certain URLs". The attacker could exploit the bug by requesting "specific URLs" from the affected access point.

"An exploit could allow the attacker to gain access to the device with elevated privileges. While the attacker would not be granted access to all possible configuration options, it could allow the attacker to view sensitive information and replace some options with values of their choosing, including wireless network configuration," said Cisco.
Affected product lines include the Aironet 1540 series, 1560 series, 1800 series, 2800 series, 3800 series, and 4800 access points.
Click to expand...

Log in or Sign up

Cisco: These Wi-Fi access points are easily owned by remote hackers, so patch now

guest Guest

Log in or Sign up

Cisco: These Wi-Fi access points are easily owned by remote hackers, so patch now

guest Guest

Useful Searches