VULNERABILITY INTELLIGENCE

CVE-2019-1960

CVSS score4.4 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2019-08-08
Last modified2026-08-24
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Description

Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating system (OS) of an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Weakness classification

  • CWE-20: Improper Input Validation
  • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Primary references