CVE-2018-0099

CVE-2018-0099 describes a command injection vulnerability in the web management GUI of Cisco D9800 Network Transport Receivers. An authenticated, remote attacker can exploit insufficient input validation to inject crafted arguments into GUI commands, leading to arbitrary command execution on the underlying BusyBox operating system. This vulnerability has a CVSS score of 8.8 (High) due to its network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability, requiring valid user credentials. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the FAUCET Risk Score indicates a significant threat.