Cisco Nexus Dashboard version 4.2.1 contains a command injection vulnerability due to improper neutralization of special elements used in commands (CWE-77). This flaw enables an attacker with low privileges to execute arbitrary commands remotely without user interaction. The vulnerability has a CVSS 3.1 base score of 9.9, indicating critical severity with network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. The vulnerability was discovered during an internal security review by Cisco's engineering team, which led to a software hardening release addressing multiple vulnerabilities including this one.

Successful exploitation of this vulnerability could allow an attacker with low privileges to execute arbitrary commands on the affected Cisco Nexus Dashboard system. This can lead to full compromise of the system's confidentiality, integrity, and availability, potentially disrupting network operations and exposing sensitive data.

The vendor has released a software hardening update addressing this vulnerability. Users of Cisco Nexus Dashboard version 4.2.1 should apply the official patch or upgrade to a fixed version as provided by Cisco. Since no specific patch link is provided in the data, users should consult Cisco's official advisories for the exact remediation steps. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.