CVE advisoryCRITICAL
CVE-2019-1971
Cisco NFVIS Web Portal Command Injection
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in Cisco Enterprise NFV Infrastructure Software's web portal allows unauthenticated attackers to execute arbitrary commands with root privileges. This can occur if the attacker provides malicious input during the authentication process, potentially leading to a full compromise of the underlying operatin