CVE-2019-1959

CWE-20 — Improper Input ValidationCWE-78 — OS Command Injection4 documents4 sources
Severity
4.4MEDIUM
EPSS
0.1%
top 69.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Cisco Enterprise NFV Infrastructure SoftwareCisco Enterprise Network Function Virtualization Infrastructure
Timeline
PublishedAug 8
Latest updateMay 24

Description

Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating system (OS) of an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 0.8 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-xh7w-pgxj-xcmg: Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files↗2022-05-24
▶
CVEList
Cisco Enterprise NFV Infrastructure Software Arbitrary File Read Vulnerabilities↗2019-08-08
▶

📋Vendor Advisories

1
Cisco
Cisco Enterprise NFV Infrastructure Software Arbitrary File Read Vulnerabilities↗2019-08-07
▶