Cisco Enterprise NFV Infrastructure Software Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) Vulnerability

Details

This vulnerability is due to improper input validation of CLI command arguments. An attacker could exploit this vulnerability by using path traversal techniques when executing a vulnerable command. A successful exploit could allow the attacker to gain root shell access to the underlying operating system and overwrite or read arbitrary files on an affected device.

Vulnerable Systems:

Cisco Enterprise NFV Infrastructure Software 

CVE Information:

CVE-2020-3236

Disclosure Timeline:
Published Date:6/17/2020