Cisco Enterprise Network Functions Virtualization Infrastructure Software Arbitrary File Write Vulnerability

A vulnerability in Cisco Enterprise Network Functions Virtualization Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with administrator privileges to overwrite files on the underlying operating system (OS) of an affected device. The vulnerability is due to improper input validation in an NFVIS file-system command. An attacker could exploit this vulnerability by using crafted variables during the execution of an affected command. A successful exploit could allow the attacker to overwrite arbitrary files on the underlying OS.

N/A

输入验证不恰当

Cisco Enterprise Network Functions Virtualization Infrastructure Software 输入验证错误漏洞

Cisco Enterprise Network Functions Virtualization Infrastructure Software（NFVIS）是美国思科（Cisco）公司的一套基于Linux的基础架构软件。该软件主要用于设计、部署和管理网络服务，并在受支持的Cisco设备上动态部署虚拟化网络功能。 Cisco Enterprise NFVIS 3.12.1之前版本中存在输入验证错误漏洞。远程攻击者可借助特制的变量利用该漏洞覆盖底层操作系统上的任意文件。

N/A

N/A