CVE-2019-1960

Cisco Enterprise NFV Infrastructure Software Arbitrary File Read Vulnerabilities

CVSS 4.4 MEDIUMEPSS 0.4%CWE-20

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 4.4EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

08 ago 2019Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating system (OS) of an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Produtos afetados

Cisco · Cisco Enterprise NFV Infrastructure Software

Referências

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190807-nfv-read