Количество 3
Количество 3
CVE-2019-1984
A vulnerability in Cisco Enterprise Network Functions Virtualization Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with administrator privileges to overwrite files on the underlying operating system (OS) of an affected device. The vulnerability is due to improper input validation in an NFVIS file-system command. An attacker could exploit this vulnerability by using crafted variables during the execution of an affected command. A successful exploit could allow the attacker to overwrite arbitrary files on the underlying OS.
GHSA-gc6w-p352-79w8
A vulnerability in Cisco Enterprise Network Functions Virtualization Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with administrator privileges to overwrite files on the underlying operating system (OS) of an affected device. The vulnerability is due to improper input validation in an NFVIS file-system command. An attacker could exploit this vulnerability by using crafted variables during the execution of an affected command. A successful exploit could allow the attacker to overwrite arbitrary files on the underlying OS.
BDU:2019-03064
Уязвимость программного обеспечения инфраструктуры Cisco Enterprise NFV Infrastructure Software (NFVIS), связанная с ошибками проверки входных данных в командах файловой системы NFVIS, позволяющая нарушителю перезаписать произвольные файлы в операционной системе уязвимого устройства
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2019-1984 A vulnerability in Cisco Enterprise Network Functions Virtualization Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with administrator privileges to overwrite files on the underlying operating system (OS) of an affected device. The vulnerability is due to improper input validation in an NFVIS file-system command. An attacker could exploit this vulnerability by using crafted variables during the execution of an affected command. A successful exploit could allow the attacker to overwrite arbitrary files on the underlying OS. | CVSS3: 6.5 | 1% Низкий | больше 6 лет назад | |
GHSA-gc6w-p352-79w8 A vulnerability in Cisco Enterprise Network Functions Virtualization Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with administrator privileges to overwrite files on the underlying operating system (OS) of an affected device. The vulnerability is due to improper input validation in an NFVIS file-system command. An attacker could exploit this vulnerability by using crafted variables during the execution of an affected command. A successful exploit could allow the attacker to overwrite arbitrary files on the underlying OS. | CVSS3: 6.5 | 1% Низкий | больше 3 лет назад | |
BDU:2019-03064 Уязвимость программного обеспечения инфраструктуры Cisco Enterprise NFV Infrastructure Software (NFVIS), связанная с ошибками проверки входных данных в командах файловой системы NFVIS, позволяющая нарушителю перезаписать произвольные файлы в операционной системе уязвимого устройства | CVSS3: 6.5 | 1% Низкий | больше 6 лет назад |
Уязвимостей на страницу