CVE-2019-1830— Cisco Wireless LAN Controller Locally Significant Certificate Denial of Service Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-1830
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Wireless LAN Controller Locally Significant Certificate Denial of Service Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in Locally Significant Certificate (LSC) management for the Cisco Wireless LAN Controller (WLC) could allow an authenticated, remote attacker to cause the device to unexpectedly restart, which causes a denial of service (DoS) condition. The attacker would need to have valid administrator credentials. The vulnerability is due to incorrect input validation of the HTTP URL used to establish a connection to the LSC Certificate Authority (CA). An attacker could exploit this vulnerability by authenticating to the targeted device and configuring a LSC certificate. An exploit could allow the attacker to cause a DoS condition due to an unexpected restart of the device.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
输入验证不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Wireless LAN Controller 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Wireless LAN Controller（WLC）是美国思科（Cisco）公司的一款无线局域网控制器产品。该产品在无线局域网中提供安全策略、入侵检测等功能。Locally Significant Certificate（LSC）management是其中的一个本地重要证书管理组件。 Cisco WLC Software中的LSC管理组件存在输入验证错误漏洞，该漏洞源于网络系统或产品未对输入的数据进行正确的验证。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Wireless LAN Controller (WLC) | 8.3 | - |
II. Public POCs for CVE-2019-1830
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-1830
请登录查看更多情报信息。
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-wlc-cert-dosvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2019-1830
Same Patch Batch · Cisco · 2019-04-18 · 23 CVEs total
| CVE-2019-1800 | Cisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabili | |
| CVE-2019-1719 | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | |
| CVE-2019-1722 | Cisco Expressway Series and Cisco TelePresence Video Communication Server Cross-Site Reque | |
| CVE-2019-1721 | Cisco Expressway Series and Cisco TelePresence Video Communication Server Denial of Servic | |
| CVE-2019-1720 | Cisco Expressway Series and Cisco TelePresence Video Communication Server Denial of Servic | |
| CVE-2019-1777 | Cisco Registered Envelope Service Stored Cross-Site Scripting Vulnerability | |
| CVE-2019-1725 | Cisco UCS B-Series Blade Servers Local Management CLI Arbitrary File Creation or CLI Param | |
| CVE-2019-1792 | Cisco Umbrella Cross-Site Scripting Vulnerability | |
| CVE-2019-1794 | Cisco Directory Connector Search Order Hijacking Vulnerability | |
| CVE-2019-1799 | Cisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabili | |
| CVE-2019-1796 | Cisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabili | |
| CVE-2019-1841 | Cisco DNA Center Unintended Proxy Via SWIM Import Interface Vulnerability | |
| CVE-2019-1797 | Cisco Wireless LAN Controller Software Cross-Site Request Forgery Vulnerability | |
| CVE-2019-1805 | Cisco Wireless LAN Controller Secure Shell Unauthorized Access Vulnerability | |
| CVE-2019-1802 | Cisco Firepower Management Center Persistent Cross-Site Scripting Vulnerability | |
| CVE-2019-1829 | Cisco Aironet Series Access Points Command Injection Vulnerability | |
| CVE-2019-1826 | Cisco Aironet Series Access Points Quality of Service Denial of Service Vulnerability | |
| CVE-2019-1835 | Cisco Aironet Series Access Points Directory Traversal Vulnerability | |
| CVE-2019-1834 | Cisco Aironet Series Access Points Denial of Service Vulnerability | |
| CVE-2019-1831 | Cisco Email Security Appliance Content Filter Bypass Vulnerability |
Showing top 20 of 23 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Cisco Wireless LAN Controller (WLC)
- CVE-2023-20251
Cisco Wireless LAN Controller 缓冲区错误漏洞 - CVE-2022-20769
Cisco Wireless LAN Controller AireOS Software FIPS Mode Deni - CVE-2022-20695
Cisco Wireless LAN Controller Management Interface Authentic - CVE-2021-1419
Cisco Access Points SSH Management Privilege Escalation Vuln - CVE-2020-3492
Cisco IOS XE Software for Catalyst 9800 Series and Cisco Air
Same vendor: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
Same weakness: CWE-20
V. Comments for CVE-2019-1830
No comments yet