"An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in ...

In fact, the same certificate is used to sign the official Ivacy VPN installer linked to from the VPN provider's website. The code-signing certificate in question (@malwrhunterteam) ...

The same set of routers are also vulnerable to multiple command injection vulnerabilities that have been tagged with the identifiers CVE-2021-1314, CVE-2021-1315, and CVE-2021-1316.

In its advisory, Cisco said the vulnerability stems from a flaw in the secure sockets layer (SSL)-based virtual private networking (VPN) component of the ASA device, which is used for remote access.