Cisco fixed a critical flaw in URWB access points, allowing attackers to run root commands, compromising industrial wireless automation security.The vulnerability allows attackers to execute arbitrary commands with root privileges by sending crafted HTTP requests to the device.The vulnerability only affects specific models in URWB mode: Catalyst IW9165D, IW9165E, and IW9167E access points.The Cisco PSIRT is not aware of attacks in the wild exploiting this vulnerability.