Cisco Network Level Service vulnerabilities

7 CVEs affecting Cisco Network Level Service, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-3567, published 2020-10-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-1821, published 2019-05-16. Critical severity, CVSS 9.8. EPSS: 98.1% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute…
CVE-2019-1823, published 2019-05-16. High severity, CVSS 7.2. EPSS: 4.4% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute…
CVE-2019-1976, published 2019-09-05. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability in the “plug-and-play” services component of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to access sensitive information on an…
CVE-2019-1825, published 2019-05-16. High severity, CVSS 8.1. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute…
CVE-2020-3567, published 2020-10-08. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in the management REST API of Cisco Industrial Network Director (IND) could allow an authenticated, remote attacker to cause the CPU utilization to increase to 100 percent, resulting…
CVE-2019-15973, published 2019-11-26. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against…
CVE-2018-0446, published 2018-10-05. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Industrial Network Director could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and…