CVE-2019-12623 : Security Advisory and Response

A security flaw in the web server feature of Cisco Enterprise Network Functions Virtualization Infrastructure Software (NFVIS) allows authenticated remote attackers to perform file enumeration, potentially leading to unauthorized access to system files.

Understanding CVE-2019-12623

What is CVE-2019-12623?

The vulnerability in Cisco NFVIS enables attackers to list files on a system by exploiting distinct error code responses from the web server.

The Impact of CVE-2019-12623

The vulnerability poses a medium-severity risk, with a CVSS base score of 4.3, allowing attackers to gain unauthorized access to system files.

Technical Details of CVE-2019-12623

Vulnerability Description

The flaw allows authenticated remote attackers to perform file enumeration on vulnerable systems.
It stems from the web server's error code responses for existing and non-existing files.

Affected Systems and Versions

Product: Cisco Enterprise NFV Infrastructure Software
Vendor: Cisco
Versions Affected: < 3.12.1 (unspecified/custom)

Exploitation Mechanism

Attack Complexity: Low
Attack Vector: Network
Privileges Required: Low
User Interaction: None

Mitigation and Prevention

Immediate Steps to Take

Apply vendor-provided patches or updates promptly.
Monitor network traffic for any suspicious activity.

Long-Term Security Practices

Regularly update and patch software to mitigate known vulnerabilities.
Implement network segmentation to limit the impact of potential attacks.
Conduct regular security assessments and audits.

Patching and Updates

Cisco has released security updates to address the vulnerability in affected versions of NFVIS.