A vulnerability in the web-based management interface of Cisco Unified Industrial Wireless Software for Cisco Ultra-Reliable Wireless Backhaul (URWB) Access Points could allow an unauthenticated, remote attacker to perform command injection attacks with root privileges on the underlying operating system. This vulnerability is due to improper validation of input to the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface of an affected system. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the underlying operating system of the affected device.
The vulnerability results from improper validation of input data transmitted to the web management interface. An attacker can conduct an attack by sending crafted HTTP requests to this interface. Successful exploitation of the vulnerability (exploit) leads to execution of arbitrary system commands with the highest privileges (root) on the device's operating system. The attack requires no authentication or user interaction.
The attacker gains full control over the device's operating system with root privileges, enabling among others reading and modifying configuration, device takeover, disruption of industrial network operation, or using the device as an entry point for further lateral movement.
Apply patches available from the vendor in accordance with the references: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-backhaul-ap-cmdinj-R7E28Ecs
Cisco Unified Industrial Wireless Software for Cisco Ultra-Reliable Wireless Backhaul (URWB) Access Points — specific versions indicated in vendor references
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H