Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability (CNVD-2022-89248)

Cisco Enterprise NFV Infrastructure Software is a set of NVF infrastructure software platform from Cisco (USA). The platform enables full lifecycle management of virtualization services through a central orchestrator and controller.Cisco Enterprise NFV Infrastructure Software is vulnerable to a command injection vulnerability that could be exploited to inject commands executed at the root level into NFVIS hosts during image registration.