Executive Summary

Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) allow an authenticated local attacker to read arbitrary files on the underlying operating system, exposing sensitive data and potentially facilitating further compromise. The flaw does not require remote access and is not listed in CISA KEV.

---

Authoritative CVE Metadata - CVSS Base Score: 4.4 (MEDIUM) - Published: 2019-08-08T08:15:12.787 - Last Modified: 2026-08-24T18:22:58.150

Original Description: Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating system (OS) of an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

"There are two primary choices in life: to accept conditions as they exist, or accept responsibility for changing them."

— Denis Waitley