3 matches found
CVE-2022-20929
A vulnerability in the upgrade signature verification of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an unauthenticated, local attacker to provide an unauthentic upgrade file for upload. This vulnerability is due to insufficient cryptographic signature verification of upgrade...
7.8CVSS6.5AI score0.00188EPSS
SaveExploits0References1
CVE-2022-20929
CVE-2022-20929 concerns Cisco Enterprise NFV Infrastructure Software (NFVIS) where upgrade signature verification is insufficient. The issue allows an unauthenticated, local attacker to supply an unauthentic upgrade file for upload, potentially leading to full system compromise. Affected componen...
7.8CVSS7.4AI score0.00188EPSS
SaveExploits0References1Affected Software1
20