Cisco Connected Grid Network Management System vulnerabilities

4 CVEs affecting Cisco Connected Grid Network Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-6780, published 2017-09-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-6780, published 2017-09-07. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to cause the system to consume additional memory,…
CVE-2015-6362, published 2015-11-10. Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days. The web GUI in Cisco Connected Grid Network Management System (CG-NMS) 3.0(0.35) and 3.0(0.54) allows remote authenticated users to bypass intended access restrictions and modify the configuration by…
CVE-2013-1163, published 2013-04-01. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple SQL injection vulnerabilities in the device-management implementation in Cisco Connected Grid Network Management System (CG-NMS) allow remote attackers to execute arbitrary SQL commands via…
CVE-2013-1171, published 2013-04-01. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the element-list implementation in Cisco Connected Grid Network Management System (CG-NMS) allow remote attackers to inject arbitrary web script…