CWE Code: 798
Vulnerability Type: privilege_escalation
CVSS Score: 7.8
CWE Name:  Use of Hard-coded Credentials
Summary: a vulnerability in the default configuration of the cisco aironet active sensor could allow an unauthenticated, remote attacker to restart the sensor. the vulnerability is due to a default local account with a static password. the account has privileges only to reboot the device. an attacker could exploit this vulnerability by guessing the account name and password to access the cli. a successful exploit could allow the attacker to reboot the device repeatedly, creating a denial of service (dos) condition. it is not possible to change the configuration or view sensitive data with this account. versions prior to dnac1.2.8 are affected.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/NONE/COMPLETE
Published Date: 2019-02-07
Last Modified Date: 2019-10-09