CVE-2019-1893

CWE-77 — Command InjectionCWE-78 — OS Command Injection5 documents5 sources
Severity
7.8HIGH
EPSS
0.1%
top 66.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Cisco Enterprise NFV Infrastructure SoftwareCisco Enterprise NFV Infrastructure Software
Timeline
PublishedJul 6
Latest updateMay 24

Description

A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS) of an affected device as root. The vulnerability is due to insufficient input validation of a configuration file that is accessible to a local shell user. An attacker could exploit this vulnerability by including malicious input during the execution of this file. A successful exploit could allow the attacker to …

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5cisco/cisco_enterprise_nfv_infrastructure_softwareunspecified — 3.10.1

🔴Vulnerability Details

2
GHSA
GHSA-78f3-36g2-xhm9: A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to execute arbitrary commands on↗2022-05-24
▶
CVEList
Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability↗2019-07-06
▶

💥Exploits & PoCs

1
Exploit-DB
Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path Traversal↗2020-01-16
▶

📋Vendor Advisories

1
Cisco
Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability↗2019-07-03
▶
CVE-2019-1893 (HIGH CVSS 7.8) | A vulnerability in Cisco Enterprise | cvebase.io