3 matches found
CVE-2021-1421
A vulnerability in Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, local attacker to perform a command injection attack on an affected device. The vulnerability is due to insufficient validation of user-supplied input to a configuration command. An attacker could...
CVE-2021-1421
Cisco Enterprise NFV Infrastructure Software (NFVIS) contains a local command-injection vulnerability (CVE-2021-1421). An authenticated, non-privileged user in the restricted CLI can cause arbitrary OS commands to run with root privileges due to insufficient validation of input to a configuration...
CVE-2021-1421 Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability
A vulnerability in Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, local attacker to perform a command injection attack on an affected device. The vulnerability is due to insufficient validation of user-supplied input to a configuration command. An attacker could...