CVE-2019-1894

CVE-2019-1894 is a critical vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) that allows an authenticated, remote attacker with administrator privileges to read or overwrite arbitrary files on the underlying operating system. This flaw stems from improper input validation in NFVIS filesystem commands. With a CVSS score of 7.2 (High), the vulnerability has a network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this CVE.