U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2019-1829

Change History

Initial Analysis by NIST 4/22/2019 2:45:25 PM

Action Type Old Value New Value
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:cisco:aironet_access_point_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 8.3.150.0
          *cpe:2.3:o:cisco:aironet_access_point_firmware:*:*:*:*:*:*:*:* versions from (including) 8.5 up to (excluding) 8.5.140.0
          *cpe:2.3:o:cisco:aironet_access_point_firmware:*:*:*:*:*:*:*:* versions from (including) 8.6.101.0 up to (excluding) 8.8.111.0
     OR
          cpe:2.3:h:cisco:aironet_1542d:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:aironet_1542i:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:aironet_1562d:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:aironet_1562e:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:aironet_1562i:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:aironet_1800i:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:aironet_2800e:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:aironet_2800i:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:aironet_3800e:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:aironet_3800i:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:aironet_3800p:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:cisco:aironet_access_point_firmware:8.5\(131.0\):*:*:*:*:*:*:*
     OR
          cpe:2.3:h:cisco:aironet_1850e:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:aironet_1850i:-:*:*:*:*:*:*:*
Added CVSS V2

								
							
							
						
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Added CVSS V3

								
							
							
						
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Added CWE

								
							
							
						
CWE-287
Changed Reference Type
http://www.securityfocus.com/bid/107990 No Types Assigned
http://www.securityfocus.com/bid/107990 Third Party Advisory, VDB Entry
Changed Reference Type
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-air-ap-cmdinj No Types Assigned
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-air-ap-cmdinj Vendor Advisory