CVE-2019-1654

CVE-2019-1654 is a vulnerability in the development shell authentication of Cisco Aironet Series Access Points (APs) running the Cisco AP-COS operating system. It allows an authenticated, local attacker with valid device credentials to gain root access to the underlying Linux OS by exploiting improper input validation at the CLI authentication prompt. This vulnerability affects software versions prior to 8.3.150.0, 8.5.135.0, and 8.8.100.0 across various Aironet models. The vulnerability has a CVSS score of 7.8 (High), indicating a significant impact with high confidentiality, integrity, and availability concerns. The attack vector is local, and while it requires prior authentication, the complexity is low, as it involves crafting specific CLI input. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, suggesting a lack of widespread attention.