4.9
Medium
CVE-2019-1698 A vulnerability in the web-based user interface of Cisco Internet of Things Field Network Director (IoT-FND) Software…
Description
A vulnerability in the web-based user interface of Cisco Internet of Things Field Network Director (IoT-FND) Software could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by importing a crafted XML file with malicious entries, which could allow the attacker to read files within the affected application. Versions prior to 4.4(0.26) are affected.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco IoT Field Network Director (IoT-FND) | Versions not published |
Other CVEs of Cisco IoT Field Network Director (IoT-FND)
The 17 CVEs of Cisco IoT Field Network Director (IoT-FND) →
CVE-2026-20167
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an…
7.7
High
CVE-2026-20168
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an…
6.5
Medium
CVE-2026-20169
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an…
6.4
Medium
CVE-2020-3531
A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote…
9.8
Critical