This vulnerability in Cisco ThousandEyes Enterprise Agent involves improper neutralization of special elements in SSL certificate input, enabling command injection. An attacker with valid administrative credentials can upload a maliciously crafted certificate, which the system fails to properly validate, resulting in arbitrary code execution with root privileges on the host OS. The CVSS 3.1 base score is 4.7, reflecting medium severity due to the requirement for high privileges and lack of user interaction. No patch or official fix has been documented in the vendor advisory or related sources.

Successful exploitation allows an authenticated attacker with administrative rights to execute arbitrary commands as root on the underlying operating system. This could lead to full system compromise, data manipulation, or disruption of service. However, exploitation requires valid administrative credentials, limiting the attack surface. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict administrative access to trusted personnel only and monitor for unauthorized certificate uploads. Avoid uploading untrusted certificates to the affected device. Follow Cisco's official communications for updates on patches or mitigations.