Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2853▼ 343 respecto a la semana anterior
Críticas / altas1376▼ 50 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)339▼ 171 respecto a la semana anterior
13 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (5.5) | 0.20% | — | Cisco Industrial Network Director | 15/11/2024 | 17/6/2026 | A vulnerability in Cisco IND could allow an authenticated, local attacker to read application data. | |
| Analizada | Crítica (9.9) | 14% | — | Cisco Industrial Network Director | 15/11/2024 | 17/6/2026 | A vulnerability in the web UI of Cisco IND could allow an authenticated, remote attacker to execute arbitrary commands with administrative privileges on the underlying operating system of an affected device. This vulnerability is due to improper input validation when uploading a Device Pack. An attacker could exploit… | |
| Modificada | Alta (8.8) | 0.16% | — | Cisco Industrial Network Director | 20/1/2023 | 17/6/2026 | A vulnerability in the monitoring application of Cisco Industrial Network Director could allow an authenticated, local attacker to access a static secret key used to store both local data and credentials for accessing remote systems. This vulnerability is due to a static key value stored in the application used to… | |
| Modificada | Media (5.4) | 0.45% | — | Cisco Industrial Network Director | 20/1/2023 | 17/6/2026 | A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attacker could exploit this vulnerability by sending requests… | |
| Modificada | Media (6.5) | 1.2% | — | Cisco Industrial Network DirectorCisco Network Level Service | 8/10/2020 | 17/6/2026 | A vulnerability in the management REST API of Cisco Industrial Network Director (IND) could allow an authenticated, remote attacker to cause the CPU utilization to increase to 100 percent, resulting in a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient validation of… | |
| Modificada | Media (6.1) | 0.80% | — | Cisco Industrial Network DirectorCisco Network Level Service | 26/11/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected application. The vulnerability is due to insufficient validation of… | |
| Modificada | Crítica (9.8) | 2.0% | — | Cisco Industrial Network DirectorCisco Network Level Service | 5/9/2019 | 17/6/2026 | A vulnerability in the “plug-and-play” services component of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper access restrictions on the web-based management interface. An… | |
| Modificada | Media (5.9) | 0.98% | — | Cisco Industrial Network Director | 17/7/2019 | 17/6/2026 | A vulnerability in the Web Services Management Agent (WSMA) feature of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data using an invalid X.509 certificate. The vulnerability is due to insufficient X.509 certificate validation… | |
| Modificada | Media (5.4) | 0.88% | — | Cisco Industrial Network Director | 5/6/2019 | 17/6/2026 | A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attacker could exploit this vulnerability by sending requests… | |
| Modificada | Alta (8.8) | 1.3% | 💥 PoC | Cisco Industrial Network Director | 5/6/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the… | |
| Modificada | Alta (7.2) | 4.3% | — | Cisco Industrial Network Director | 5/6/2019 | 17/6/2026 | A vulnerability in the software update feature of Cisco Industrial Network Director could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper validation of files uploaded to the affected application. An attacker could exploit this vulnerability by authenticating to… | |
| Modificada | Media (4.3) | 0.45% | — | Cisco Industrial Network Director | 5/10/2018 | 17/6/2026 | A vulnerability in the DHCP service of Cisco Industrial Network Director could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper handling of DHCP lease requests. An attacker could exploit this vulnerability by sending malicious DHCP lease… | |
| Modificada | Media (6.1) | 0.91% | — | Cisco Industrial Network Director | 13/6/2017 | 17/6/2026 | A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against an affected system. More Information: CSCvd25405. Known Affected Releases: 1.1(0.176). |