6.7
Moyenne
CVE-2019-1952 A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local…
Description
A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to overwrite or read arbitrary files. The attacker would need valid administrator privilege-level credentials. This vulnerability is due to improper input validation of CLI command arguments. An attacker could exploit this vulnerability by using directory traversal techniques when executing a vulnerable command. A successful exploit could allow the attacker to overwrite or read arbitrary files on an affected device.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Enterprise NFV Infrastructure Software 3.10 | premières → < 3.10.1 | 3.10.1 |
Références
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Enterprise NFV Infrastructure Software
Les 41 CVE de Cisco Enterprise NFV Infrastructure Software →
CVE-2026-20293
A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and…
7.1
Élevée
CVE-2026-20288
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker…
6.5
Moyenne
CVE-2026-20198
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an…
4.8
Moyenne
CVE-2026-20090
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with…
4.8
Moyenne