CVE-2019-1816

CVE-2019-1816 is a high-severity command injection vulnerability affecting the log subscription subsystem of Cisco Web Security Appliance (WSA) products. An authenticated, local attacker can exploit insufficient input validation via the web or command-line interface to inject scripting commands. Successful exploitation allows the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root, as reflected by its CVSS score of 7.8. There is currently no public exploit code available, nor is there evidence of active exploitation, and it has received minimal community discussion or media coverage.