Cisco IOS XE Software Web UI Command Injection Vulnerability (cisco-sa-web-cmdinj4-S2TmH7GA)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

CVE-2020-3211

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device. The vulnerability is due to improper input sanitization. An attacker who has valid...

CVE-2020-3211

CVE-2020-3211 concerns Cisco IOS XE Software Web UI Command Injection. The connected Cisco advisory confirms an authenticated, remote attacker could exploit improper input sanitization in the Web UI to run arbitrary commands with root privileges on the device’s operating system. The impact is con...