Overview

Cisco Unified Industrial Wireless Software for Ultra-Reliable Wireless Backhaul Access Point is affected by a critical vulnerability. The vulnerability could allow a remote attacker to perform a command injection against the affected device.

Description

Cisco Unified Industrial Wireless Software for Ultra-Reliable Wireless Backhaul Access Point is affected by a critical vulnerability tracked as CVE-2024-20418 with a base score of 10. The vulnerability is due to improper validation of input to the web-based management interface where the attacker could send a crafted HTTP requests to the web-based management interface of an affected system. Upon successful submission, unauthenticated remote attacker to may perform command injection attacks with root privileges on the underlying operating system.

Impact

Successful exploitation of this vulnerability may allow the attacker to take control of the affected system.

Solution

Cisco has released a patch for this vulnerability. Users and administrators are encouraged to apply necessary updates.

References

• 1. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-backhaul-ap-cmdinj-R7E28Ecs