### [CVE-2019-1675](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1675) ![](https://img.shields.io/static/v1?label=Product&message=Cisco%20Aironet%20Active%20Sensor%20&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-798&color=brighgreen) ### Description A vulnerability in the default configuration of the Cisco Aironet Active Sensor could allow an unauthenticated, remote attacker to restart the sensor. The vulnerability is due to a default local account with a static password. The account has privileges only to reboot the device. An attacker could exploit this vulnerability by guessing the account name and password to access the CLI. A successful exploit could allow the attacker to reboot the device repeatedly, creating a denial of service (DoS) condition. It is not possible to change the configuration or view sensitive data with this account. Versions prior to DNAC1.2.8 are affected. ### POC #### Reference No PoCs from references. #### Github - https://github.com/ExpLangcn/FuYao-Go