Command Injection Vulnerability in Cisco IOS XE

Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core and WAN, Cisco IOS XE reduces business and network complexity. Cisco IOS XE suffers from a command injection vulnerability that stems from insufficient input validation, which can be exploited by an attacker to inject commands using root privileges via web UI functionality.