IN
Product
Industrial Network Director
13
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 8Low 0
Watch
Add Industrial Network Director to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20036 | 9.9 | Nov 15 | A vulnerability in the web UI of Cisco IND could allow an authenticated, remote attacker to execute arbitrary commands with administrative privileges on the underlying operating… Affected: before 1.11.3 |
| CVE-2019-1976 | 9.8 | Sep 5 | A vulnerability in the “plug-and-play” services component of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to access… Affected: before 1.6.0 |
| CVE-2023-20038 | 8.8 | Jan 20 | A vulnerability in the monitoring application of Cisco Industrial Network Director could allow an authenticated, local attacker to access a static secret key used to store both… Affected: before 1.6.0 |
| CVE-2019-1881 | 8.8 | Jun 5 | A vulnerability in the web-based management interface of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to conduct a cross-site request… Affected: 1.5(0.250) |
| CVE-2019-1861 | 7.2 | Jun 5 | A vulnerability in the software update feature of Cisco Industrial Network Director could allow an authenticated, remote attacker to execute arbitrary code Affected: before 1.6.0 |
| CVE-2020-3567 | 6.5 | Oct 8 | A vulnerability in the management REST API of Cisco Industrial Network Director (IND) could allow an authenticated, remote attacker to cause the CPU utilization to increase to 100… Affected: before 1.9.0 |
| CVE-2019-15973 | 6.1 | Nov 26 | A vulnerability in the web-based management interface of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: before 1.7.1-45 |
| CVE-2017-6675 | 6.1 | Jun 13 | A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack… Affected: 1.1(0.176) |
| CVE-2019-1940 | 5.9 | Jul 17 | A vulnerability in the Web Services Management Agent (WSMA) feature of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to gain unauthorized… Affected: before 1.7 |
| CVE-2023-20039 | 5.5 | Nov 15 | A vulnerability in Cisco IND could allow an authenticated, local attacker to read application data Affected: before 1.11.3 |
| CVE-2023-20037 | 5.4 | Jan 20 | A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks Affected: before 1.7.0 |
| CVE-2019-1882 | 5.4 | Jun 5 | A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks Affected: 1.5(0.250) |
| CVE-2018-15392 | 4.3 | Oct 5 | A vulnerability in the DHCP service of Cisco Industrial Network Director could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition Affected: through 1.5\(0.3\) |
Showing 13