{"id":46499,"date":"2022-05-05T18:06:00","date_gmt":"2022-05-05T18:06:00","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/cisco-warns-of-critical-vulnerability-in-virtualized-network-software\/"},"modified":"2022-05-05T18:06:00","modified_gmt":"2022-05-05T18:06:00","slug":"cisco-warns-of-critical-vulnerability-in-virtualized-network-software","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/cisco-warns-of-critical-vulnerability-in-virtualized-network-software\/","title":{"rendered":"Cisco warns of critical vulnerability in virtualized network software"},"content":{"rendered":"
<\/div>\n

Multiple vulnerabilities have been discovered in Cisco’s Enterprise NFV Infrastructure Software (NFVIS). The worst of the vulnerabilities could let an attacker escape from the guest virtual machine (VM<\/a>) to the host machine, Cisco disclosed<\/a>. The other two problems involve letting a bad actor inject commands that execute at the root level and allowing a remote attacker to leak system data from the host to the VM.<\/p>\n

NFVIS is Linux-based infrastructure software designed to help enterprises and service providers to deploy virtualized network functions, such as a virtual router, firewall and WAN acceleration, Cisco stated.<\/p>\n