Enterprise Nfv Infrastructure Software vulnerabilities

7 known vulnerabilities in Enterprise Nfv Infrastructure Software from Cisco. 7 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Cisco Enterprise NFV Infrastructure Software: Exposed Dangerous Method or Function

  CVE-2026-20293Sep 8, 2026Cisco

  A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an una

• 10.0 Critical severity

  Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Exploited

  CVE-2025-32433Apr 16, 2025ErlangEPSS 98.9%

  Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protoco

• 8.8 High severity

  Cisco IOS XR Software: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-20655Nov 15, 2024Cisco

  A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient validation of a process argument on an affected devi

• 7.8 High severity

  Cisco Enterprise NFV Infrastructure Software: Improper Verification of Cryptographic Signature

  CVE-2022-20929Mar 10, 2023Cisco

  A vulnerability in the upgrade signature verification of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, local attacker to provide an unauthentic upgrade file for upload. This vulnerability is due to insufficient cryptograp

• 7.4 High severity

  Cisco Enterprise NFV Infrastructure Software: Improper Restriction of XML External Entity Reference

  CVE-2022-20780May 4, 2022CiscoEPSS 11.2%

  Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level, or leak system data from the host to the

• 8.8 High severity

  Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow…

  CVE-2022-20779May 4, 2022CiscoEPSS 10.5%

  Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level, or leak system data from the host to the

• 9.9 Critical severity

  Cisco Enterprise NFV Infrastructure Software: Improper Access Control

  CVE-2022-20777May 4, 2022CiscoEPSS 11.1%

  Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level, or leak system data from the host to the