Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

20 records in Iot Field Network Director · all components

Priority MEDIUM 53

A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to access the back-end database of an affected system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.022 Published 2020-11-18 No fix listed CWE-306
Priority MEDIUM 43

A vulnerability in the web interface of Cisco IoT Field Network Director could allow an unauthenticated, remote attacker to trigger high CPU usage, resulting in a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01967 Published 2019-08-08 No fix listed CWE-399
Priority MEDIUM 43

A vulnerability in the UDP protocol implementation for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to exhaust system resources, resulting in a denial of service (DoS) condit…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02299 Published 2019-01-23 No fix listed CWE-400
Priority MEDIUM 42

A vulnerability in Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to view sensitive database information on an affected device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01335 Published 2020-11-18 No fix listed CWE-497
Priority MEDIUM 42

A vulnerability in the SOAP API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to access and modify information on devices that belong to a different domain.

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.01012 Published 2020-11-18 No fix listed CWE-284
Priority MEDIUM 42

A vulnerability in the API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to view sensitive information on an affected system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01546 Published 2020-11-18 No fix listed CWE-306
Priority MEDIUM 42

A vulnerability in the Constrained Application Protocol (CoAP) implementation of Cisco IoT Field Network Director could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition on an affected…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01707 Published 2020-04-15 No fix listed CWE-20
Priority MEDIUM 41

A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to gain access to the back-end database of an affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01584 Published 2020-11-18 No fix listed CWE-89
Priority MEDIUM 41

A vulnerability in the web-based management interface of Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and alter the data…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00671 Published 2018-05-17 No fix listed CWE-352
Priority LOW 36

A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventually forcing the device…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01738 Published 2017-09-07 No fix listed CWE-399
Priority LOW 33

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to cause a DoS condition on a remotely managed router.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00272 Published 2026-05-06 No fix listed CWE-284
Priority LOW 32

A vulnerability in the file system of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to overwrite files on an affected system.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.01451 Published 2020-11-18 No fix listed CWE-73
Priority LOW 29

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to retrieve files that they do not have permission to access.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00272 Published 2026-05-06 No fix listed CWE-388
Priority LOW 29

Multiple vulnerabilities in the web UI of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against users on an affected system.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00801 Published 2020-11-18 No fix listed CWE-74
Priority LOW 28

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to access files and execute commands on a remote router.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0021 Published 2026-05-06 No fix listed CWE-77
Priority LOW 28

A vulnerability in the web-based user interface of Cisco Internet of Things Field Network Director (IoT-FND) Software could allow an authenticated, remote attacker to gain read access to information that is stored on an…

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.03122 Published 2019-02-21 Fixed in 4.4(0.26) CWE-611
Priority LOW 21

A vulnerability in the access control functionality of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to view lists of users from different domains that are configured on an affected…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00757 Published 2020-11-18 No fix listed CWE-284
Priority LOW 20

A vulnerability in the user management functionality of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to manage user information for users in different domains on an affected system…

CVSS 3.1MEDIUM 4.1 Network High privileges No interaction EPSS 0.00718 Published 2020-11-18 No fix listed CWE-284
Open these records in search →