← CVE Intelligence

CVE-2020-3138

Cisco Enterprise NFV Infrastructure Software Remote Code Execution Vulnerability PUBLISHED

Description (CNA)

A vulnerability in the upgrade component of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to install a malicious file when upgrading. The vulnerability is due to insufficient signature validation. An attacker could exploit this vulnerability by providing a crafted upgrade file. A successful exploit could allow the attacker to upload crafted code to the affected device.

Affected (CNA)

Vendor / productVersions
Cisco / NAaffected unspecified before n/a

CWE

CWE-347

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.