The vulnerability in the web interface of the Cisco Industrial Network Director software package allows a hacker to execute arbitrary commands.

The vulnerability of the Cisco Industrial Network Director software’s web interface exists due to the lack of measures taken to neutralize special elements used in the operating system command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...