Cisco Industrial Network Director vulnerabilities

13 CVEs affecting Cisco Industrial Network Director, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-20039, published 2024-11-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-20036, published 2024-11-15. Critical severity, CVSS 9.9. EPSS: 13.8% chance of exploitation in the next 30 days. A vulnerability in the web UI of Cisco IND could allow an authenticated, remote attacker to execute arbitrary commands with administrative privileges on the underlying operating system of an affected…
CVE-2019-1861, published 2019-06-05. High severity, CVSS 7.2. EPSS: 4.3% chance of exploitation in the next 30 days. A vulnerability in the software update feature of Cisco Industrial Network Director could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper…
CVE-2019-1976, published 2019-09-05. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability in the “plug-and-play” services component of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to access sensitive information on an…
CVE-2019-1881, published 2019-06-05. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack…
CVE-2020-3567, published 2020-10-08. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in the management REST API of Cisco Industrial Network Director (IND) could allow an authenticated, remote attacker to cause the CPU utilization to increase to 100 percent, resulting…
CVE-2019-1940, published 2019-07-17. Medium severity, CVSS 5.9. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the Web Services Management Agent (WSMA) feature of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to gain unauthorized read access to…
CVE-2017-6675, published 2017-06-13. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against an affected…
CVE-2019-1882, published 2019-06-05. Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks. The vulnerability is due to improper…
CVE-2019-15973, published 2019-11-26. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against…
CVE-2018-15392, published 2018-10-05. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the DHCP service of Cisco Industrial Network Director could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability is due to…

Latest

CVE-2023-20039, published 2024-11-15. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in Cisco IND could allow an authenticated, local attacker to read application data. This vulnerability is due to insufficient default file permissions that are applied to the…
CVE-2023-20038, published 2023-01-20. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the monitoring application of Cisco Industrial Network Director could allow an authenticated, local attacker to access a static secret key used to store both local data and…
CVE-2023-20037, published 2023-01-20. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks. The vulnerability is due to improper…