Priority MEDIUM 58
A vulnerability in the web UI of Cisco IND could allow an authenticated, remote attacker to execute arbitrary commands with administrative privileges on the underlying operating system of an affected device.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.1378 · Published 2024-11-15 · No fix listed CWE-78
Priority MEDIUM 52
A vulnerability in the “plug-and-play” services component of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to access sensitive information on an affected device.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01975 · Published 2019-09-05 · Fixed in 1.6.0 CWE-200
Priority MEDIUM 41
A vulnerability in the web-based management interface of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01287 · Published 2019-06-05 · No fix listed CWE-352
Priority MEDIUM 41
A vulnerability in the software update feature of Cisco Industrial Network Director could allow an authenticated, remote attacker to execute arbitrary code.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04297 · Published 2019-06-05 · Fixed in 1.6.0 CWE-20
Priority LOW 39
A vulnerability in the monitoring application of Cisco Industrial Network Director could allow an authenticated, local attacker to access a static secret key used to store both local data and credentials for accessing re…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00166 · Published 2023-01-19 · No fix listed CWE-321
Priority LOW 31
A vulnerability in the management REST API of Cisco Industrial Network Director (IND) could allow an authenticated, remote attacker to cause the CPU utilization to increase to 100 percent, resulting in a denial of servic…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01154 · Published 2020-10-08 · No fix listed CWE-20
Priority LOW 29
A vulnerability in the web-based management interface of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interf…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00801 · Published 2019-11-26 · No fix listed CWE-79
Priority LOW 29
A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against an affected system.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00911 · Published 2017-06-13 · No fix listed CWE-79
Priority LOW 28
A vulnerability in the Web Services Management Agent (WSMA) feature of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data using an i…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00977 · Published 2019-07-17 · Fixed in 1.7 CWE-310
Priority LOW 26
A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00876 · Published 2019-06-05 · No fix listed CWE-79
Priority LOW 25
A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00462 · Published 2023-01-19 · No fix listed CWE-79
Priority LOW 24
A vulnerability in Cisco IND could allow an authenticated, local attacker to read application data.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00197 · Published 2024-11-15 · No fix listed CWE-552
Priority LOW 20
A vulnerability in the DHCP service of Cisco Industrial Network Director could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition.
CVSS 3.0MEDIUM 4.3· Adjacent network · No auth · No interaction · EPSS 0.0045 · Published 2018-10-05 · No fix listed CWE-399