An authenticated attacker holding at least Report Designer access to Cisco Unified Intelligence Center can upload arbitrary files through the web management interface and potentially escalate to root.
Posts tagged: Cisco
Cisco Identity Services Engine Unauthenticated Remote Code Execution Vulnerabilities
Three maximum-severity flaws let anyone reach Cisco ISE’s APIs without logging in and run commands as root, with one variant also allowing arbitrary file uploads into privileged directories.
SNMP Remote Code Execution Vulnerabilities in Cisco IOS and IOS XE Software
Flaws in the SNMP subsystem of Cisco IOS and IOS XE let anyone with a read-only community string or valid SNMPv3 credentials send a crafted packet to execute code or reload the device.