cisco-sa-20180905-nfvis-dos1: Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability
A vulnerability in the user management functionality of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a denial of service (DoS) attack against an affected system. The vulnerability is due to insufficient validation of user-provided input. An attacker could exploit this vulnerability by logging in with a highly privileged user account and performing a sequence of specific user management operations that interfere with the underlying operating system. A successful exploit could allow the attacker to permanently degrade the functionality of the affected system.
There are no workarounds that address this vulnerability.
This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-nfvis-dos1
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20180905-nfvis-dos1?
The severity of cisco-sa-20180905-nfvis-dos1 is classified as high due to the potential for denial of service attacks.
How do I fix cisco-sa-20180905-nfvis-dos1?
To fix cisco-sa-20180905-nfvis-dos1, apply the latest software updates provided by Cisco for the affected version of NFV Infrastructure Software.
Who is affected by cisco-sa-20180905-nfvis-dos1?
Users of Cisco Enterprise NFV Infrastructure Software are affected by the cisco-sa-20180905-nfvis-dos1 vulnerability.
What type of attack does cisco-sa-20180905-nfvis-dos1 enable?
The cisco-sa-20180905-nfvis-dos1 vulnerability enables authenticated remote attackers to execute denial of service (DoS) attacks.
Is authentication required to exploit cisco-sa-20180905-nfvis-dos1?
Yes, authentication is required to exploit the cisco-sa-20180905-nfvis-dos1 vulnerability.