CVE-2022-20779

Katalog CVE

CVSS 8.8 · High EPSS 10,5%

Kerentanan Improper Access Control pada cisco enterprise nfv infrastructure software. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level, or leak system data from the host to the VM. For more information about these vulnerabilities, see the Details section of this advisory.

Rincian

Terbit di NVD

4 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control
CWE-20: Improper Input Validation

EPSS (30 hari)

10,5% peluang dieksploitasi; lebih tinggi dari 95,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-NFVIS-MUL-7DySRX9 advisory vendor
• https://github.com/orangecertcc/security-research/security/advisories/GHSA-77vw-2pmg-q492 exploit · advisory pihak ketiga