CVE-2019-1972

CVE-2019-1972 is a privilege escalation vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) that allows an authenticated, local administrator to execute arbitrary commands as root on the underlying operating system. The vulnerability stems from insufficient restrictions within the restricted CLI. With a CVSS score of 6.7 (Medium), successful exploitation grants full control (confidentiality, integrity, availability) to the attacker, requiring high privileges and local access. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.