Insufficient upgrade signature verification in Cisco Enterprise NFV Infrastructure Software

CVE-2022-20929

Summary

A vulnerability exists in Cisco Enterprise NFV Infrastructure Software (NFVIS) related to the insufficient verification of upgrade file signatures. This security flaw could enable an unauthorized local attacker to present a non-authentic upgrade file for upload. If an administrator unknowingly accepts such a file, it could lead to a complete compromise of the NFVIS system, jeopardizing its integrity and security. Administrators are urged to review systems and apply any relevant security measures to mitigate exposure to this risk.

References