CVE-2019-1861

Cisco Industrial Network Director (IND) remote code execution (CVE-2019-1861) is caused by improper validation of uploaded files in the software update feature. An authenticated administrator can upload an arbitrary file, leading to code execution with elevated privileges. Affected are IND releas...