Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability

Vulnerability

A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) allows an authenticated, remote attacker to cause the affected system to reboot or shut down. The issue is due to insufficient server-side authorization checks. Affected versions include various releases of Cisco NFVIS; specific details are available in the referenced Cisco Security Advisory [1]. The vulnerability can be triggered by a low-privileged user logged into the web interface.

Exploitation

An attacker must be authenticated to the web-based management interface with a low-privileged user account. No additional privileges are required beyond those of a standard user. The attacker can exploit the vulnerability by sending a crafted HTTP request to the affected system. No user interaction from a privileged user is needed [1].

Impact

A successful exploit allows the attacker to cause the affected system to reboot or shut down, resulting in a denial of service (DoS) condition. The attacker does not gain any other access or control over the system beyond this disruption [1].

Mitigation

Cisco has released fixed software updates to address this vulnerability. Customers are advised to consult the Cisco bug ID mentioned in the advisory and upgrade to a fixed release. No workarounds are available [1]. For systems that are no longer supported, upgrading to a supported version is recommended.