CVE-2019-1960
Description
Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating system (OS) of an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Risk Information
Base Score
4.4
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.115
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Cisco Enterprise NFV Infrastructure Software Arbitrary File Read Vulnerabilities For Cisco Enterprise NFV Infrastructure Software | NCM |
| Cisco Enterprise NFV Infrastructure Software Arbitrary File Read Vulnerabilities For | NCM |
| Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) Vulnerability (CVE-2019-1960) | NCM |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-1700665 | Security Update for Cisco Enterprise NFV Infrastructure Software NFVIS-3.12.3 |
| PATCH-1706026 | Security Update for CAF-1.2.0.0 |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234