The Cybersecurity and Infrastructure Security Agency (CISA) published an advisory after Cisco patched multiple security vulnerabilities, two (2) of them being rated as critical. The flaws affect Enterprise NFV Infrastructure Software (NFVIS), a Linux-based software designed to deploy virtualized network functions, acting as virtual routers, switches, and other networking-related IoT devices. The exploitation of these critical vulnerabilities could allow attackers to inject commands that execute with root privileges, potentially allowing them to guest escape the virtualized devices to compromise the actual host. The first critical flaw, tracked as CVE-2022-20777, stems from insufficient guest restrictions in the Enterprise NFVIS’ Next Generation Input/Output (NGIO) feature, and allows unauthenticated attackers with only guest permissions to send API calls that execute as root on the NFVIS host. The second critical flaw, tracked as CVE-2022-20779, is described as an improper input validation vulnerability, stemming from attackers installing a maliciously crafted virtual machine (VM) that allows for command injections that also execute with root privileges. The CTIX team recommends that all organizations deploying this architecture ensure that they update to the latest stable version immediately.