Cisco announced the availability of patches for a critical authentication bypass vulnerability in Enterprise NFV Infrastructure Software (NFVIS).

The vulnerability, tracked as CVE-2021-34746 (CVSS score of 9.8), could allow an unauthenticated, remote attacker log in to an affected device as an administrator.

Cisco has released software updates to address the bug. Enterprise NFVIS releases 4.6.1 and later contain the patches.

Cisco has also released patches for four medium-severity vulnerabilities impacting Prime Infrastructure and Evolved Programmable Network (EPN) Manager, Prime Collaboration Provisioning, Identity Services Engine (ISE) Software, and Nexus Insights. Details on all of the addressed vulnerabilities are available on Cisco’s security portal – cisco.com.

Source: securityweek.com