CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Improper Input Validation
Summary: a vulnerability in the user management functionality of cisco enterprise nfv infrastructure software (nfvis) could allow an authenticated, remote attacker to perform a denial of service (dos) attack against an affected system. the vulnerability is due to insufficient validation of user-provided input. an attacker could exploit this vulnerability by logging in with a highly privileged user account and performing a sequence of specific user management operations that interfere with the underlying operating system. a successful exploit could allow the attacker to permanently degrade the functionality of the affected system.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/NONE/COMPLETE
Published Date: 2018-10-05
Last Modified Date: 2019-10-09