Virtual Event Today: Supply Chain Security Summit - Join Event In-Progress

Security Experts:

Connect with us

Hi, what are you looking for?



Cisco Patches Critical Enterprise NFVIS Vulnerability for Which PoC Exploit Is Available

Cisco on Wednesday announced the availability of patches for a critical authentication bypass vulnerability in Enterprise NFV Infrastructure Software (NFVIS) for which proof-of-concept exploit code already exists.

Cisco on Wednesday announced the availability of patches for a critical authentication bypass vulnerability in Enterprise NFV Infrastructure Software (NFVIS) for which proof-of-concept exploit code already exists.

Enterprise NFVIS is a piece of infrastructure software that helps organizations deploy virtualized network functions, including virtual routers and firewalls, on supported Cisco devices, while also providing centralized management and support for automated provisioning.

Tracked as CVE-2021-34746 (CVSS score of 9.8), the newly patched vulnerability was identified by Orange Group security researcher Cyrille Chatras. Proof-of-concept (PoC) exploit code for this flaw “is available.”

The issue resides in the TACACS+ authentication, authorization and accounting (AAA) feature of Enterprise NFVIS and exists because user supplied input is not completely validated when passed to an authentication script.

Because of this bug, an unauthenticated, remote attacker could inject parameters into an authentication request and exploit the vulnerability to bypass authentication and log in to an affected device as administrator.

The security hole affects Enterprise NFVIS release 4.5.1, but only if the TACACS external authentication method is configured, Cisco says.

While no workarounds exist to mitigate the vulnerability, Cisco has released software updates to address the bug. Enterprise NFVIS releases 4.6.1 and later contain the patches.

Cisco says that, although PoC code that exploits the vulnerability exists, it is not aware of malicious attacks targeting vulnerable products.

Cisco has also released patches for four medium-severity vulnerabilities impacting Prime Infrastructure and Evolved Programmable Network (EPN) Manager, Prime Collaboration Provisioning, Identity Services Engine (ISE) Software, and Nexus Insights.

Details on all of the addressed vulnerabilities are available on Cisco’s security portal.

Related: Cisco Patches Serious Vulnerabilities in Data Center Products

Related: Code Execution Flaw Found in Cisco Firepower Device Manager On-Box Software

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this webinar to learn best practices that organizations can use to improve both their resilience to new threats and their response times to incidents.


Join this live webinar as we explore the potential security threats that can arise when third parties are granted access to a sensitive data or systems.


Expert Insights

Related Content


Less than a week after announcing that it would suspended service indefinitely due to a conflict with an (at the time) unnamed security researcher...

Risk Management

The supply chain threat is directly linked to attack surface management, but the supply chain must be known and understood before it can be...

Application Security

Drupal released updates that resolve four vulnerabilities in Drupal core and three plugins.


Apple has released updates for macOS, iOS and Safari and they all include a WebKit patch for a zero-day vulnerability tracked as CVE-2023-23529.

Cloud Security

VMware vRealize Log Insight vulnerability allows an unauthenticated attacker to take full control of a target system.

Application Security

A CSRF vulnerability in the source control management (SCM) service Kudu could be exploited to achieve remote code execution in multiple Azure services.

IoT Security

Lexmark warns of a remote code execution (RCE) vulnerability impacting over 120 printer models, for which PoC code has been published.


GoAnywhere MFT users warned about a zero-day remote code injection exploit that can be targeted directly from the internet