CVE-2021-1264

CVE-2021-1264 is a command injection vulnerability in the Command Runner tool of Cisco DNA Center, affecting Cisco Catalyst Center. This flaw allows an authenticated, remote attacker to execute arbitrary CLI commands on managed devices due to insufficient input validation. With a CVSS score of 8.8 (HIGH), it presents a significant risk, as an attacker can achieve high impact on confidentiality, integrity, and availability with low attack complexity. While there is no known active exploitation (KEV) or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness within the cybersecurity community.