Cisco Issues Patches for 3 New Flaws Affecting Enterprise NFVIS Software

Cisco Systems on Wednesday shipped security patches to contain three flaws impacting its Enterprise NFV Infrastructure Software NFVIS that could permit an attacker to fully compromise and take control over the hosts. Tracked as CVE-2022-20777, CVE-2022-20779, and CVE-2022-20780, the vulnerabiliti...

CVE-2022-20777

creationtimestamp| type| source ---|---|--- 2022-05-04 20:35:29+00:00| seen| https://t.me/cibsecurity/41940 2022-05-05 14:32:02+00:00| seen| https://t.me/truesecator/2917 2022-05-05 16:15:00+00:00| seen| https://t.me/itsecnews/616...

CVE-2022-20777

Cisco Enterprise NFV Infrastructure Software (NFVIS) contains multiple vulnerabilities (CVE-2022-20777/20779/20780) that could allow an attacker to escape from a guest VM to the host, execute root-level commands, or access host data. Root causes include insufficient guest restrictions (CVE-2022-2...