cisco-sa-20190821-nfv-filewrite: Cisco Enterprise Network Functions Virtualization Infrastructure Software Arbitrary File Write Vulnerability
A vulnerability in Cisco Enterprise Network Functions Virtualization Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with administrator privileges to overwrite files on the underlying operating system (OS) of an affected device. The vulnerability is due to improper input validation in an NFVIS file-system command. An attacker could exploit this vulnerability by using crafted variables during the execution of an affected command. A successful exploit could allow the attacker to overwrite arbitrary files on the underlying OS. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190821-nfv-filewrite
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20190821-nfv-filewrite?
The severity of cisco-sa-20190821-nfv-filewrite is high due to the potential for remote file overwrite by an authenticated attacker.
How do I fix cisco-sa-20190821-nfv-filewrite?
Fixing cisco-sa-20190821-nfv-filewrite involves applying the latest patches and updates provided by Cisco for the affected software.
What are the potential impacts of cisco-sa-20190821-nfv-filewrite?
The potential impacts of cisco-sa-20190821-nfv-filewrite include unauthorized file access and modification on the operating system level of the affected device.
Who is affected by cisco-sa-20190821-nfv-filewrite?
Organizations using Cisco Enterprise Network Functions Virtualization Infrastructure Software with administrator privileges are affected by cisco-sa-20190821-nfv-filewrite.
Is there a workaround for cisco-sa-20190821-nfv-filewrite?
Currently, there are no known workarounds for cisco-sa-20190821-nfv-filewrite other than applying the recommended patches.