The vulnerability of the command-line interface of the Cisco Integrated Management Controller, a remote administration tool, allows a malicious actor to execute arbitrary commands on the underlying operating system and elevate their privileges to root-level.

The vulnerability of the command-line interface of the Cisco Integrated Management Controller remote administration software exists due to the lack of measures taken to neutralize the special commands used in the operating system’s command line. Exploiting this vulnerability allows an attacker to...