CLI Command Parser Vulnerability in Cisco Mobility Express Wireless LAN Controllers

CVE-2016-9197

What is CVE-2016-9197?

A vulnerability in the CLI command parser of Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers allows an authenticated local attacker to gain unauthorized access to the underlying operating system shell with root-level privileges. This could potentially lead to further exploitation of the system by executing arbitrary commands. The flaw exists in specific software versions, making it imperative for users to update to the latest releases to mitigate the risks associated with this vulnerability. Further details can be found in the Cisco Security Advisory.

References