CVE-2022-20777: critical vulnerability in Cisco Enterprise NFV Infrastructure Software
Cisco Enterprise NFV Infrastructure Software Vulnerabilities
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
33Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.9epss 11%
Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level, or leak system data from the host to the VM. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
Cisco · Cisco Enterprise NFV Infrastructure SoftwareRelated CVEs — Cisco Enterprise NFV Infrastructure Software
In the same product, most dangerous first.
CVE-2021-34746CRITICALCisco Enterprise NFV Infrastructure Software Authentication Bypass VulnerabilityEPSS 17.7%CVE-2022-20780CRITICALCisco Enterprise NFV Infrastructure Software VulnerabilitiesEPSS 11.2%CVE-2022-20779CRITICALCisco Enterprise NFV Infrastructure Software VulnerabilitiesEPSS 10.5%CVE-2019-1971HIGHCisco Enterprise NFV Infrastructure Software Command Injection VulnerabilityEPSS 3.6%CVE-2019-1894HIGHCisco Enterprise NFV Infrastructure Software Arbitrary File Read and Write VulnerabilityEPSS 3.4%CVE-2019-1895CRITICALCisco Enterprise NFV Infrastructure Software VNC Authentication Bypass VulnerabilityEPSS 2.3%