cisco enterprise nfv infrastructure software vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv3

A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local malicious user to perform a command injection attack on an affected device. The vulnerability is due to insufficient validation of user-supplied input to a configuration co...

Cisco Enterprise Nfv Infrastructure Software

5.3

CVSSv3

A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local malicious user to access the shell of the underlying Linux operating system on the affected device. The vulnerability is due to improper input validation in the ...

Cisco Enterprise Nfv Infrastructure Software 3.9.1

7.2

CVSSv3

A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with administrator privileges to overwrite or read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to impr...

Cisco Enterprise Nfv Infrastructure Software 3.9.1

7.8

CVSSv3

A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local malicious user to execute arbitrary commands on the underlying operating system (OS) of an affected device as root. The vulnerability is due to insufficient input validatio...

Cisco Enterprise Nfv Infrastructure Software 3.9.1

6.5

CVSSv3

A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote malicious user to cause an affected system to reboot or shut down. The vulnerability is due to insufficient server-side authorization...

Cisco Network Functions Virtualization Infrastructure -

6.5

CVSSv3

A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote malicious user to read any file on an affected system. The vulnerability is due to insufficient authorization and parameter validation checks. An attacker ...

Cisco Network Functions Virtualization Infrastructure -

9.9

CVSSv3

Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an malicious user to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level, or leak system data from the host to the VM. For more ...

Cisco Enterprise Nfv Infrastructure Software

1 Article

8.8

CVSSv3

Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an malicious user to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level, or leak system data from the host to the VM. For more ...

Cisco Enterprise Nfv Infrastructure Software

1 Article

7.4

CVSSv3

Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an malicious user to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level, or leak system data from the host to the VM. For more ...

Cisco Enterprise Nfv Infrastructure Software

1 Article

6.5

CVSSv3

A vulnerability in the web management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote malicious user to conduct a path traversal attack on a targeted system. The vulnerability is due to insufficient validation of web request ...

Cisco Network Functions Virtualization Infrastructure 3.6.1 Cisco Network Functions Virtualization Infrastructure 3.7.1

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook