CVE-2016-6414

Cisco IOS and IOS XE (affected: iox command) are vulnerable to local command injection via crafted iox command line options, allowing an authenticated local attacker to execute arbitrary commands in the IOx Linux guest OS. Root cause: insufficient input validation of iox command line arguments. I...