CVE-2019-1952: Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability
A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to overwrite or read arbitrary files. The attacker would need valid administrator privilege-level credentials. This vulnerability is due to improper input validation of CLI command arguments. An attacker could exploit this vulnerability by using directory traversal techniques when executing a vulnerable command. A successful exploit could allow the attacker to overwrite or read arbitrary files on an affected device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1952?
CVE-2019-1952 has a medium severity rating allowing authenticated attackers to overwrite or read arbitrary files.
How do I fix CVE-2019-1952?
To mitigate CVE-2019-1952, ensure that you upgrade to Cisco Enterprise NFV Infrastructure Software version 3.10.1 or later.
Who is affected by CVE-2019-1952?
CVE-2019-1952 affects users of Cisco Enterprise NFV Infrastructure Software versions prior to 3.10.1.
What types of attacks can CVE-2019-1952 facilitate?
CVE-2019-1952 can facilitate unauthorized file modifications or disclosures by authenticated attackers with administrator privileges.
Is administrative access required to exploit CVE-2019-1952?
Yes, valid administrator privilege-level credentials are necessary to exploit CVE-2019-1952.