https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-rmi-cmd-ex
The vulnerability announced publicly in October 2018 now has a patch. This is a nasty vuln, but it's got a patch, so get things fixed up if you run this gear.