CVE detail

CVE-2019-1984 — CVE-2019-1984

Published 2019-08-21 · Modified 2026-06-17 · Vendor cisco · Product enterprise_network_function_virtualization_infrastructure_sofware · Source nvd

MEDIUM

severity

CVSS-derived band

6.5

CVSS v3

0–10 scale

0.0157

EPSS probability

exploitation probability, 30d

73.0%

EPSS percentile

percentile vs all CVEs

NOT LISTED

CISA KEV

known exploited catalog

Description

A vulnerability in Cisco Enterprise Network Functions Virtualization Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with administrator privileges to overwrite files on the underlying operating system (OS) of an affected device. The vulnerability is due to improper input validation in an NFVIS file-system command. An attacker could exploit this vulnerability by using crafted variables during the execution of an affected command. A successful exploit could allow the attacker to overwrite arbitrary files on the underlying OS.

Remediation

Product	Vulnerable range	Fixed version	Advisory
Cisco Cisco Enterprise NFV Infrastructure Software	>=unspecified<3.12.1	3.12.1	advisory ↗

References

cvedb.io · NVD · CISA KEV · FIRST EPSS · vendor advisories (CVE Program List v5). Informational only, no warranty — verify every remediation against the vendor advisory before acting on it. This product uses data from the NVD API but is not endorsed or certified by the NVD, CISA, FIRST.org or any vendor named. CVE® is a registered trademark of The MITRE Corporation.