Cisco released a security update for multiple vulnerabilities that affected Cisco IOS XE Software web-based user interface (Web UI) that allows a remote attacker to execute commands with elevated privileges on the vulnerable system. Cisco IOS XE Software is an internetworking operating system for enterprise networks and is using in several Cisco devices such as Some Cisco routers (such as ASR 1000) and some Catalyst switches (such as 3850).

Read full article on GBHackers