CVE-2018-0098: A vulnerability in the web-based management interface of Cisco WAP150 Wireless-AC/N Dual Radio Access Point...

Security readout for executives and security teams

This issue affects Cisco small-business wireless access points where the web management interface fails to properly validate input. An attacker must trick an administrator or user of that interface into opening a crafted link. If successful, the attacker could run script in the management-interface browser context or read sensitive browser-based information. Exposure is most likely where Cisco WAP150 or WAP361 access points are still deployed and administrators use the web management interface. Risk increases if management access is reachable from broad internal networks or the internet. Treat this as a targeted administration-plane risk, not a broad wormable emergency. Prioritize environments still using these access points, especially if management interfaces are widely reachable or administrators manage them from normal browsing workstations. Mitigation focus: Review Cisco advisory cisco-sa-20180117-wap for fixed releases and vendor guidance.; Inventory Cisco WAP150 and WAP361 devices still in service.; Restrict web management access to trusted administrative networks only..

Prepared

Jun 7, 2026, 20:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.