cisco-sa-nfvis-cmdinj-DkFjqg2j: Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability
A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to perform a command injection attack on an affected device. The vulnerability is due to insufficient validation of user-supplied input to a configuration command. An attacker could exploit this vulnerability by including malicious input during the execution of this command. A successful exploit could allow a non-privileged attacker authenticated in the restricted CLI to execute arbitrary commands on the underlying operating system (OS) with root privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nfvis-cmdinj-DkFjqg2j
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-nfvis-cmdinj-DkFjqg2j?
The severity of cisco-sa-nfvis-cmdinj-DkFjqg2j is classified as high due to the potential for command injection by an authenticated attacker.
How do I fix cisco-sa-nfvis-cmdinj-DkFjqg2j?
To fix cisco-sa-nfvis-cmdinj-DkFjqg2j, apply the recommended software updates or patches provided by Cisco.
Who is affected by cisco-sa-nfvis-cmdinj-DkFjqg2j?
Cisco Enterprise NFV Infrastructure Software users are affected by cisco-sa-nfvis-cmdinj-DkFjqg2j if they are running vulnerable versions.
What are the risks associated with cisco-sa-nfvis-cmdinj-DkFjqg2j?
The risks associated with cisco-sa-nfvis-cmdinj-DkFjqg2j include unauthorized command execution and potential loss of data integrity.
What conditions are required for cisco-sa-nfvis-cmdinj-DkFjqg2j to be exploited?
cisco-sa-nfvis-cmdinj-DkFjqg2j can be exploited if an attacker has authenticated local access to the affected device.