Cisco
Cisco Enterprise NFV Infrastructure Software: vulnerabilidades y CVE
Cisco Enterprise NFV Infrastructure Software tiene 34 vulnerabilidades publicadas, 7 de ellas en los últimos 12 meses. 6 son críticas y 1 figuran en el catálogo de explotación activa de CISA.
CVE34
Últimos 12 meses7
Críticas6
Explotadas activamente1
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-32433 | Crítica (10) | 99% | ⚠ Explotación activa | 16 abr 2025 | Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-20096 | Media (6.5) | 0.72% | — | 1 abr 2026 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on an affected system and execute… |
| CVE-2026-20095 | Media (6.5) | 0.93% | — | 1 abr 2026 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on an affected system and execute… |
| CVE-2026-20090 | Media (4.8) | 0.24% | — | 1 abr 2026 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This… |
| CVE-2026-20089 | Media (4.8) | 0.24% | — | 1 abr 2026 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This… |
| CVE-2026-20088 | Media (4.8) | 0.22% | — | 1 abr 2026 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This… |
| CVE-2026-20087 | Media (4.8) | 0.17% | — | 1 abr 2026 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This… |
| CVE-2026-20085 | Media (6.1) | 0.18% | — | 1 abr 2026 | A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. This vulnerability is due to… |
| CVE-2025-32433 | Crítica (10) | 99% | ⚠ Explotación activa | 16 abr 2025 | Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution… |
| CVE-2022-20929 | Alta (7.8) | 0.19% | — | 10 mar 2023 | A vulnerability in the upgrade signature verification of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, local attacker to provide an unauthentic upgrade file for upload. This… |
| CVE-2022-20780 | Alta (7.4) | 11% | — | 4 may 2022 | Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level,… |
| CVE-2022-20779 | Alta (8.8) | 10% | — | 4 may 2022 | Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level,… |
| CVE-2022-20777 | Crítica (9.9) | 11% | — | 4 may 2022 | Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level,… |
| CVE-2021-34746 | Crítica (9.8) | 18% | — | 2 sept 2021 | A vulnerability in the TACACS+ authentication, authorization and accounting (AAA) feature of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to bypass authentication… |
| CVE-2021-1421 | Alta (7.8) | 0.67% | — | 6 may 2021 | A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to perform a command injection attack on an affected device. The vulnerability is due to insufficient… |
| CVE-2021-1127 | Media (5.4) | 0.61% | — | 13 ene 2021 | A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user… |
| CVE-2020-3470 | Crítica (9.8) | 4.8% | — | 18 nov 2020 | Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges. The vulnerabilities are due… |
| CVE-2020-3478 | Alta (8.1) | 1.2% | — | 4 sept 2020 | A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to overwrite certain files that should be restricted on an affected device. The… |
| CVE-2020-3365 | Media (6.5) | 1.6% | — | 4 sept 2020 | A vulnerability in the directory permissions of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a directory traversal attack on a limited set of restricted… |
| CVE-2020-3236 | Media (6.7) | 0.47% | — | 18 jun 2020 | A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to gain root shell access to the underlying operating system and overwrite or read… |
| CVE-2020-3138 | Media (6.7) | 0.21% | — | 19 feb 2020 | A vulnerability in the upgrade component of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to install a malicious file when upgrading. The vulnerability is due to… |
| CVE-2019-1973 | Media (4.8) | 0.80% | — | 8 ago 2019 | A vulnerability in the web portal framework of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the… |
| CVE-2019-1972 | Media (6.7) | 0.50% | — | 8 ago 2019 | A vulnerability the Cisco Enterprise NFV Infrastructure Software (NFVIS) restricted CLI could allow an authenticated, local attacker with valid administrator-level credentials to elevate privileges and execute arbitrary… |
| CVE-2019-1971 | Crítica (9.8) | 3.6% | — | 8 ago 2019 | A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to perform a command injection attack and execute arbitrary commands with root… |
| CVE-2019-1961 | Media (4.9) | 1.9% | — | 8 ago 2019 | A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system (OS) of an affected device. The… |
| CVE-2019-1960 | Media (4.4) | 0.35% | — | 8 ago 2019 | Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating system (OS) of an affected device. For… |
| CVE-2019-1959 | Media (4.4) | 0.35% | — | 8 ago 2019 | Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating system (OS) of an affected device. For… |
| CVE-2019-1953 | Media (6.5) | 1.5% | — | 8 ago 2019 | A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to view a password in clear text. The vulnerability is due to incorrectly logging… |
| CVE-2019-1952 | Media (6.7) | 0.72% | — | 8 ago 2019 | A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to overwrite or read arbitrary files. The attacker would need valid administrator… |
| CVE-2019-1946 | Media (6.5) | 1.4% | — | 8 ago 2019 | A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to bypass authentication and get limited access to the… |
| CVE-2019-1895 | Crítica (9.8) | 2.3% | — | 7 ago 2019 | A vulnerability in the Virtual Network Computing (VNC) console implementation of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to access the VNC console session of… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.