CVE-2018-0462: falha em Cisco Enterprise NFV Infrastructure Software
Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 1.5%
A vulnerability in the user management functionality of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a denial of service (DoS) attack against an affected system. The vulnerability is due to insufficient validation of user-provided input. An attacker could exploit this vulnerability by logging in with a highly privileged user account and performing a sequence of specific user management operations that interfere with the underlying operating system. A successful exploit could allow the attacker to permanently degrade the functionality of the affected system.
Produtos afetados
Cisco · Cisco Enterprise NFV Infrastructure SoftwareCVEs relacionadas — Cisco Enterprise NFV Infrastructure Software
No mesmo produto, das mais perigosas para as menos.
CVE-2021-34746CRITICALCisco Enterprise NFV Infrastructure Software Authentication Bypass VulnerabilityEPSS 17.7%CVE-2022-20780CRITICALCisco Enterprise NFV Infrastructure Software VulnerabilitiesEPSS 11.2%CVE-2022-20777CRITICALCisco Enterprise NFV Infrastructure Software VulnerabilitiesEPSS 11.1%CVE-2022-20779CRITICALCisco Enterprise NFV Infrastructure Software VulnerabilitiesEPSS 10.5%CVE-2019-1971HIGHCisco Enterprise NFV Infrastructure Software Command Injection VulnerabilityEPSS 3.6%CVE-2019-1894HIGHCisco Enterprise NFV Infrastructure Software Arbitrary File Read and Write VulnerabilityEPSS 3.4%