EUVD-2020-24507

Malware in sbrugna...

The vulnerability of Cisco Enterprise NFV Infrastructure Software (NFVIS) lies in the lack of measures to neutralize special elements used in operating system commands, allowing attackers to execute arbitrary commands with root privileges.

The vulnerability of Cisco Enterprise NFV Infrastructure Software NFVIS is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges...

Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability

Cisco Enterprise NFV Infrastructure Software is a lightweight virtualization platform that integrates complete VM lifecycle management, monitoring, device programmability, and service chaining in one installable package. A command injection vulnerability exists in Cisco Enterprise NFV...