4.3
Medium
CVE-2020-3365 A vulnerability in the directory permissions of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an…
Description
A vulnerability in the directory permissions of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a directory traversal attack on a limited set of restricted directories. The vulnerability is due to a flaw in the logic that governs directory permissions. An attacker could exploit this vulnerability by using capabilities that are not controlled by the role-based access control (RBAC) mechanisms of the software. A successful exploit could allow the attacker to overwrite files on an affected device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Enterprise NFV Infrastructure Software | Versions not published |
References
Timeline
- Published
- Last modified
Other CVEs of Cisco Enterprise NFV Infrastructure Software
The 41 CVEs of Cisco Enterprise NFV Infrastructure Software →
CVE-2026-20293
A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and…
7.1
High
CVE-2026-20288
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker…
6.5
Medium
CVE-2026-20198
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an…
4.8
Medium
CVE-2026-20090
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with…
4.8
Medium