Cisco Security Agent "st_upload" Remote File Creation Vulnerability

A vulnerability has been identified in Cisco Security Agent, which could be exploited by remote attackers to take complete control of a vulnerable system. This issue is caused by an input validation error in the "webagent.exe" component when processing "st_upload" POST requests, which could be exploited by remote unauthenticated attackers to create a malicious file on an affected web server and execute arbitrary code with SYSTEM privileges.