CISCO BUG LETS HACKERS RUN COMMANDS AS ROOT ON UWRB ACCESS POINTS

Summary from the TLDR InfoSec newsletter

Cisco has disclosed a new critical CVE that allows for RCE on Ultra-Reliable Wireless Backhaul (URWB) access points. Attackers can exploit improper input validation on the web-based management interface of vulnerable devices by sending crafted requests to execute arbitrary commands. The vulnerability only affects URWB devices running vulnerable software with the URWB operating mode enabled which can be checked by seeing if the show mpls-config CLI command is available.