CVE-2019-17562

CVE-2019-17562 is a critical buffer overflow vulnerability affecting Apache CloudStack versions prior to 4.13.1, specifically within the baremetal component. This flaw allows an unauthenticated attacker to execute arbitrary shell commands by injecting malicious input into the 'mac' parameter of the baremetal virtual router. With a CVSS score of 9.8, this vulnerability presents a severe risk, enabling complete compromise of confidentiality, integrity, and availability due to its network-based attack vector and low attack complexity. Despite its critical severity, there is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.