CVE-2019-1865

Cisco IMC Software is vulnerable to a command-injection in its web-based management interface. The issue stems from insufficient validation of user-supplied input in an interface monitoring mechanism, allowing an authenticated remote attacker to craft a request that injects and executes arbitrary...