Priority LOW 33
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to cause a DoS condition on a remotely managed router.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00272 · Published 2026-05-06 · No fix listed CWE-284
Priority LOW 28
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to access files and execute commands on a remote router.
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.0021 · Published 2026-05-06 · No fix listed CWE-77
Priority LOW 29
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to retrieve files that they do not have permission to access.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00272 · Published 2026-05-06 · No fix listed CWE-388
Priority CRITICAL 90KEV
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.99999 · Published 2023-10-10 · Partial fix · 1.28.0, 0.17.0 +9 CWE-400
Priority MEDIUM 53
A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to access the back-end database of an affected system.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.022 · Published 2020-11-18 · No fix listed CWE-306
Priority MEDIUM 42
A vulnerability in the API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to view sensitive information on an affected system.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01546 · Published 2020-11-18 · No fix listed CWE-306
Priority LOW 29
Multiple vulnerabilities in the web UI of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against users on an affected system.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00801 · Published 2020-11-18 · No fix listed CWE-74
Priority LOW 20
A vulnerability in the user management functionality of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to manage user information for users in different domains on an affected system…
CVSS 3.1MEDIUM 4.1· Network · High privileges · No interaction · EPSS 0.00718 · Published 2020-11-18 · No fix listed CWE-284
Priority LOW 24
A vulnerability in the web UI of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to obtain hashes of user passwords on an affected device.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00974 · Published 2020-11-18 · No fix listed CWE-256
Priority LOW 32
A vulnerability in the file system of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to overwrite files on an affected system.
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.01451 · Published 2020-11-18 · No fix listed CWE-73
Priority LOW 21
A vulnerability in the access control functionality of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to view lists of users from different domains that are configured on an affected…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00757 · Published 2020-11-18 · No fix listed CWE-284
Priority MEDIUM 42
A vulnerability in Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to view sensitive database information on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01335 · Published 2020-11-18 · No fix listed CWE-497
Priority MEDIUM 41
A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to gain access to the back-end database of an affected device.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01584 · Published 2020-11-18 · No fix listed CWE-89
Priority MEDIUM 42
A vulnerability in the SOAP API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to access and modify information on devices that belong to a different domain.
CVSS 3.1HIGH 8.7· Network · High privileges · No interaction · EPSS 0.01012 · Published 2020-11-18 · No fix listed CWE-284
Priority MEDIUM 42
A vulnerability in the Constrained Application Protocol (CoAP) implementation of Cisco IoT Field Network Director could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition on an affected…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01707 · Published 2020-04-15 · No fix listed CWE-20
Priority MEDIUM 43
A vulnerability in the web interface of Cisco IoT Field Network Director could allow an unauthenticated, remote attacker to trigger high CPU usage, resulting in a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01967 · Published 2019-08-08 · No fix listed CWE-399
Priority LOW 28
A vulnerability in the web-based user interface of Cisco Internet of Things Field Network Director (IoT-FND) Software could allow an authenticated, remote attacker to gain read access to information that is stored on an…
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.03122 · Published 2019-02-21 · Fixed in 4.4(0.26) CWE-611
Priority MEDIUM 43
A vulnerability in the UDP protocol implementation for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to exhaust system resources, resulting in a denial of service (DoS) condit…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02299 · Published 2019-01-23 · No fix listed CWE-400
Priority MEDIUM 41
A vulnerability in the web-based management interface of Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and alter the data…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00671 · Published 2018-05-17 · No fix listed CWE-352
Priority LOW 36
A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventually forcing the device…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01738 · Published 2017-09-07 · No fix listed CWE-399