EUVD-2017-3925

Malware in sbrugna...

CVE-2017-12352: Improper Neutralization of Special Elements used in a Command

A vulnerability in certain system script files that are installed at boot time on Cisco Application Policy Infrastructure Controllers could allow an authenticated, local attacker to gain elevated privileges and execute arbitrary commands with root privileges on an affected host operating system...