cisco-sa-20190807-nfv-read: Cisco Enterprise NFV Infrastructure Software Arbitrary File Read Vulnerabilities
Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating system (OS) of an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190807-nfv-read
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20190807-nfv-read?
The severity of cisco-sa-20190807-nfv-read is considered high due to the potential for local attackers to read sensitive files on the operating system.
How do I fix cisco-sa-20190807-nfv-read?
To fix cisco-sa-20190807-nfv-read, ensure that you update your Cisco Enterprise NFV Infrastructure Software to the latest patched version.
What types of attacks can exploit cisco-sa-20190807-nfv-read?
cisco-sa-20190807-nfv-read can be exploited via authenticated local attacks that allow users to read arbitrary files on the system.
Are all versions of Cisco Enterprise NFV Infrastructure Software affected by cisco-sa-20190807-nfv-read?
Yes, all versions of Cisco Enterprise NFV Infrastructure Software are potentially affected by cisco-sa-20190807-nfv-read vulnerabilities.
What should I do if I detect an exploitation of cisco-sa-20190807-nfv-read?
If you detect an exploitation of cisco-sa-20190807-nfv-read, immediately isolate the affected device and initiate incident response protocols.