PT-2018-8713

Name of the Vulnerable Software and Affected Versions: Cisco IoT Field Network Director versions prior to 4.1.1-6 Cisco IoT Field Network Director versions prior to 4.2.0-123 Connected Grid Network Management System versions prior to 3.0 Description: A vulnerability in the web-based management...

CVE-2018-0270: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco IoT Field Network Director IoT-FND could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and alter the data of existing users and groups on an affected device. The vulnerability is due to...

Memory corruption

A vulnerability in the TCP throttling process for Cisco IoT Field Network Director IoT-FND could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventually forcing the device to restart, aka Memory Exhaustion. The vulnerability is due to insufficient...

CVE-2017-6780: Allocation of Resources Without Limits or Throttling

A vulnerability in the TCP throttling process for Cisco IoT Field Network Director IoT-FND could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventually forcing the device to restart, aka Memory Exhaustion. The vulnerability is due to insufficient...

PT-2017-3051

Name of the Vulnerable Software and Affected Versions Connected Grid Network Management System versions prior to IoT-FND Release 4.0 IoT Field Network Director versions prior to IoT-FND Release 4.0 Description A vulnerability in the TCP throttling process could allow an unauthenticated, remote...

Design/Logic Flaw

The web GUI in Cisco Connected Grid Network Management System CG-NMS 3.00.35 and 3.00.54 allows remote authenticated users to bypass intended access restrictions and modify the configuration by leveraging the Monitor-Only role, aka Bug ID CSCuw42640...

PT-2015-7203

Name of the Vulnerable Software and Affected Versions Cisco Connected Grid Network Management System CG-NMS versions 3.00.35 through 3.00.54 Description The issue allows remote authenticated users to bypass intended access restrictions and modify the configuration by leveraging the Monitor-Only...

CVE-2015-6362: Undefined Security Weakness

The web GUI in Cisco Connected Grid Network Management System CG-NMS 3.00.35 and 3.00.54 allows remote authenticated users to bypass intended access restrictions and modify the configuration by leveraging the Monitor-Only role, aka Bug ID CSCuw42640...

CVE-2013-1163

Multiple SQL injection vulnerabilities in the device-management implementation in Cisco Connected Grid Network Management System CG-NMS allow remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCue14553 and CSCue38746...

CVE-2013-1171

Multiple cross-site scripting XSS vulnerabilities in the element-list implementation in Cisco Connected Grid Network Management System CG-NMS allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCue14517, CSCue38914, CSCue38884, CSCue38882,...

CVE-2013-1171: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the element-list implementation in Cisco Connected Grid Network Management System CG-NMS allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCue14517, CSCue38914, CSCue38884, CSCue38882,...

PT-2013-2939

Name of the Vulnerable Software and Affected Versions Cisco Connected Grid Network Management System CG-NMS affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the element-list implementation. These vulnerabilities allow remote...

CVE-2013-1163: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the device-management implementation in Cisco Connected Grid Network Management System CG-NMS allow remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCue14553 and CSCue38746...

PT-2013-2931

Name of the Vulnerable Software and Affected Versions Cisco Connected Grid Network Management System CG-NMS affected versions not specified Description The issue concerns multiple SQL injection vulnerabilities in the device-management implementation. These vulnerabilities allow remote attackers t...