CVE-2019-1984
Last modified
CVE-2019-1984 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. A vulnerability in Cisco Enterprise Network Functions Virtualization Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with administrator privileges to overwrite files on the underlying operating system (OS) of an affected device. The vulnerability is due to improper input validation in an NFVIS file-system command. EPSS estimates a 1.57% chance of exploitation in the next 30 days.
Description
A vulnerability in Cisco Enterprise Network Functions Virtualization Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with administrator privileges to overwrite files on the underlying operating system (OS) of an affected device. The vulnerability is due to improper input validation in an NFVIS file-system command. An attacker could exploit this vulnerability by using crafted variables during the execution of an affected command. A successful exploit could allow the attacker to overwrite arbitrary files on the underlying OS.
Metrics
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Enterprise Network Function Virtualization Infrastructure Sofware | < 3.12.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-1984?
How severe is CVE-2019-1984?
How do I fix CVE-2019-1984?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-19834Directory Traversal in ruckus_cli2 in Ruckus Wireless Unleas…7.2
- CVE-2019-19835SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unle…7.5
- CVE-2019-19836AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed th…9.8
- CVE-2019-19837Incorrect access control in the web interface in Ruckus Wire…5.3
- CVE-2019-19838emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 al…9.8
- CVE-2019-19839emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 al…9.8
- CVE-2019-19840A stack-based buffer overflow in zap_parse_args in zap.c in …9.8
- CVE-2019-19841emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 al…9.8
- CVE-2019-19842emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 al…9.8
- CVE-2019-19843Incorrect access control in the web interface in Ruckus Wire…9.8
- CVE-2019-19844Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.…9.8
- CVE-2019-19845In Joomla! before 3.9.14, a missing access check in framewor…5.3
Are you affected by CVE-2019-1984?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST