cisco-sa-20190807-nfv-cli-path: Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability
A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to overwrite or read arbitrary files. The attacker would need valid administrator privilege-level credentials. This vulnerability is due to improper input validation of CLI command arguments. An attacker could exploit this vulnerability by using directory traversal techniques when executing a vulnerable command. A successful exploit could allow the attacker to overwrite or read arbitrary files on an affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190807-nfv-cli-path
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20190807-nfv-cli-path?
The severity of cisco-sa-20190807-nfv-cli-path is categorized as high due to the potential for authenticated users to overwrite or read arbitrary files.
Who is affected by the cisco-sa-20190807-nfv-cli-path vulnerability?
The cisco-sa-20190807-nfv-cli-path vulnerability affects users of Cisco Enterprise NFV Infrastructure Software (NFVIS) with valid administrator privileges.
How do I fix cisco-sa-20190807-nfv-cli-path?
To fix cisco-sa-20190807-nfv-cli-path, ensure that you update to the latest version of Cisco Enterprise NFV Infrastructure Software that addresses this vulnerability.
What type of access is required to exploit cisco-sa-20190807-nfv-cli-path?
Exploitation of cisco-sa-20190807-nfv-cli-path requires valid administrator privilege-level credentials.
What can an attacker do with cisco-sa-20190807-nfv-cli-path?
An attacker can overwrite or read arbitrary files on the system, potentially leading to further exploitation or data exposure.