Cisco Enterprise NFV Infrastructure Software Web-Based Management Interface Authentication Bypass Vulnerability

Vulnerability

The vulnerability resides in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS). It stems from an incorrect implementation of authentication, allowing an unauthenticated, remote attacker to bypass authentication. Affected versions are Cisco Enterprise NFVIS releases earlier than 3.10.1 [1].

Exploitation

An attacker can exploit this vulnerability by sending a crafted authentication request to the web-based management interface of an affected system. No prior authentication or user interaction is required; the attacker only needs network access to the management interface [1].

Impact

Successful exploitation grants the attacker limited access to the web-based management interface. The attacker can view limited configuration details and potentially upload a virtual machine image, which could lead to further compromise of the NFV infrastructure [1].

Mitigation

Cisco has released software updates to address this vulnerability. The fixed version is Cisco Enterprise NFVIS Release 3.10.1. There are no workarounds that address this vulnerability. Users should upgrade to the fixed release [1].