Impacted by the flaw, which stems from improper input validation to the web-based management interface, are Catalyst IW9165E Rugged Access Points and Wireless Clients, Catalyst IW9165D Heavy Duty Access Points, and Catalyst IW9167E Heavy Duty Access Points with activated URWB, noted Cisco. “A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the underlying operating system of the affected device,”

Source: SC Magazine