CVE-2019-1959

Cisco Enterprise NFV Infrastructure Software Arbitrary File Read Vulnerabilities

CVSS 4.4 MEDIUMEPSS 0.4%CWE-20

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 4.4EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

08 ago 2019Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating system (OS) of an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Productos afectados

Cisco · Cisco Enterprise NFV Infrastructure Software

Referencias

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190807-nfv-read