Cisco Network Functions Virtualization Infrastructure vulnerabilities

4 CVEs affecting Cisco Network Functions Virtualization Infrastructure, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-0460, published 2018-10-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-0460, published 2018-10-05. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to read any file on an affected system. The vulnerability is due…
CVE-2018-0323, published 2018-05-17. Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability in the web management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a path traversal attack on a targeted…
CVE-2018-0459, published 2018-10-05. Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to cause an affected system to reboot or…
CVE-2018-0324, published 2018-05-17. Medium severity, CVSS 6.7. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, high-privileged, local attacker to perform a command injection attack. The…