Overview

Cisco has released a patch to address several vulnerabilities in their NFV Infrastructure Software (NFVIS).

Two of these, (CVE-2022-20777, 2022-20779) could allow attackers to execute code on the host machine and another (CVE-2022-20780) could be used to leak system data.

Impact

An authenticated, remote attacker could escape from the guest virtual machine (VM) to gain unauthorised root-level access on the NFVIS host.

Affected Products

Cisco Enterprise NFVIS before 4.7.1.

Containment, Mitigations & Remediations

No mitigations are listed. Devices should be updated as soon as possible.

Indicators of Compromise

None listed.

Threat Landscape

Cisco PSIRT is not aware of any public announcements or exploitations in the wild.

Mitre Methodologies

T1210 – Exploitation of Remote Services

Further Information

Cisco Enterprise NFV Infrastructure Software Vulnerabilities

Further Threat Intelligence from Quorum Cyber

Headquarters

Verdant
2 Redheughs Rigg
Edinburgh
United Kingdom
EH12 9DQ

FLORIDA, USA Office

501 E Kennedy Blvd.
STE 1400
Tampa FL 33602

Ontario, Canada Office

1375 North Service Rd E
Suite 102
Oakville
Ontario L6H 1A7

Contact Us
Address

Verdant
2 Redheughs Rigg
Edinburgh
United Kingdom
EH12 9DQ

501 E Kennedy Blvd
STE 1400
Tampa FL 33602

1375 North Service Rd E
Suite 102
Oakville
Ontario L6H 1A7

HEADQUARTERS
Verdant
2 Redheughs Rigg
Edinburgh
United Kingdom
EH12 9DQ



FLORIDA, USA OFFICE
501 E Kennedy Blvd.
STE 1400
Tampa FL 33602


ONTARIO, CANADA OFFICE
1375 North Service Rd E
Suite 102
Oakville
Ontario L6H 1A7


Legal

Privacy Preference Center

Skip to content