Cisco Iot Field Network Director any version

Cisco IoT Field Network Director Unauthenticated REST API Vulnerability

Cisco IoT Field Network REST API Insufficient Input Validation Vulnerability

Cisco IoT Field Network Director SOAP API Authorization Bypass Vulnerability

Cisco IoT Field Network Director TLS Renegotiation Denial of Service Vulnerability

A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventually forcing the device to restart, aka Memory Exhaustion. The vulnerability is due to insufficient rate-limiting protection. An attacker could exploit this vulnerability by sending a high rate of TCP packets to a specific group of open listening ports on a targeted device. An exploit could allow the attacker to cause the system to consume additional memory. If enough available memory is consumed, the system will restart, creating a temporary denial of service (DoS) condition. The DoS condition will end after the device has finished the restart process. This vulnerability affects the following Cisco products: Connected Grid Network Management System, if running a software release prior to IoT-FND Release 4.0; IoT Field Network Director, if running a software release prior to IoT-FND Release 4.0. Cisco Bug IDs: CSCvc77164.

Cisco IoT Field Network Director Remote Device Denial of Service Vulnerability

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

Cisco IoT Field Network Director Denial of Service Vulnerability

Cisco IoT Field Network Director Missing API Authentication Vulnerability

Cisco IoT Field Network Director Information Disclosure Vulnerability

Cisco IoT Field Network Director File Overwrite Vulnerability

Cisco IoT Field Network Director Path Traversal Vulnerability

Cisco IoT Field Network Director Command Injection Vulnerability

Cisco IoT Field Network Director Cross-Site Scripting Vulnerabilities

Cisco IoT Field Network Director Improper Access Control Vulnerability

Cisco IoT Field Network Director XML External Entity Vulnerability

Cisco IoT Field Network Director Unprotected Storage of Credentials Vulnerability

Cisco IoT Field Network Director Improper Domain Access Control Vulnerability