CVE-2022-20777

Katalog CVE

CVSS 9.9 · Critical EPSS 11,1%

Kerentanan Improper Access Control pada cisco enterprise nfv infrastructure software. Skor CVSS 3.1 9.9 (Critical) menurut NVD.

Deskripsi (NVD)

Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level, or leak system data from the host to the VM. For more information about these vulnerabilities, see the Details section of this advisory.

Rincian

Terbit di NVD

4 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.9 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control

EPSS (30 hari)

11,1% peluang dieksploitasi; lebih tinggi dari 95,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-NFVIS-MUL-7DySRX9 advisory vendor
• https://github.com/orangecertcc/security-research/security/advisories/GHSA-v56f-9gq3-rx3g exploit · mitigasi · advisory pihak ketiga