This vulnerability chain in Riverbed SteelCentral NetExpress 10.8.7 involves an authenticated SQL injection at the '/api/common/1.0/login' endpoint enabling attacker-controlled user creation in the appliance database. The attacker then leverages a command injection vulnerability at '/index.php?page=licenses' to execute arbitrary commands. Finally, an insecure sudoers configuration allows privilege escalation to root by permitting the 'mazu' user to execute arbitrary commands as root through SSH key extraction and command chaining. The combined effect is a multi-stage remote code execution leading to full root compromise of the virtual appliance.

Successful exploitation allows an attacker to gain full remote root access to the affected virtual appliance. This includes the ability to create arbitrary user accounts, execute arbitrary commands on the system, and escalate privileges to root. The vulnerability thus compromises the confidentiality, integrity, and availability of the appliance and potentially the network it monitors.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected endpoints and limit authenticated user privileges to reduce the risk of exploitation. Monitor vendor communications closely for updates and apply patches promptly once released.