CVE-2015-0584

Cisco DX650 (Desktop Collaboration Experience) endpoints are affected by a local command-injection vulnerability in the image-upgrade feature. The root cause is insufficient input sanitization during the image upgrade process, allowing an authenticated, local attacker to execute arbitrary OS comm...