CVE-2021-1443

Cisco IOS XE Software Web UI OS Command Injection (CVE-2021-1443) is a web UI vulnerability in which an authenticated attacker with privileged credentials can tamper with a configuration file and, via an API call, inject and execute arbitrary code with root privileges on the device. Root cause: i...