CVE-2019-1830

Severity
4.9MEDIUM
EPSS
0.2%
top 61.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedApr 18
Latest updateMay 13

Description

A vulnerability in Locally Significant Certificate (LSC) management for the Cisco Wireless LAN Controller (WLC) could allow an authenticated, remote attacker to cause the device to unexpectedly restart, which causes a denial of service (DoS) condition. The attacker would need to have valid administrator credentials. The vulnerability is due to incorrect input validation of the HTTP URL used to establish a connection to the LSC Certificate Authority (CA). An attacker could exploit this vulnerabil

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HExploitability: 1.2 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-w2qg-wq7x-rcmg: A vulnerability in Locally Significant Certificate (LSC) management for the Cisco Wireless LAN Controller (WLC) could allow an authenticated, remote a2022-05-13
CVEList
Cisco Wireless LAN Controller Locally Significant Certificate Denial of Service Vulnerability2019-04-18

📋Vendor Advisories

1
Cisco
Cisco Wireless LAN Controller Locally Significant Certificate Denial of Service Vulnerability2019-04-17
CVE-2019-1830 (MEDIUM CVSS 4.9) | A vulnerability in Locally Signific | cvebase.io