CVE-2019-15997

CVE-2019-15997 describes a command injection vulnerability in Cisco DNA Spaces: Connector, affecting the cisco dna_spaces product. An authenticated, local attacker with high privileges could exploit insufficient argument validation in a CLI command to execute arbitrary commands as root on the underlying operating system. While rated Medium severity (CVSS 6.7) due to requiring local, high-privileged access, a successful exploit grants full system compromise. There is no known public exploit code, active exploitation, or significant community discussion surrounding this vulnerability.