9.8
Critical
CVE-2020-3531 A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote…
Description
A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to access the back-end database of an affected system. The vulnerability exists because the affected software does not properly authenticate REST API calls. An attacker could exploit this vulnerability by obtaining a cross-site request forgery (CSRF) token and then using the token with REST API requests. A successful exploit could allow the attacker to access the back-end database of the affected device and read, alter, or drop information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco IoT Field Network Director (IoT-FND) | Versions not published |
Other CVEs of Cisco IoT Field Network Director (IoT-FND)
The 17 CVEs of Cisco IoT Field Network Director (IoT-FND) →
CVE-2026-20167
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an…
7.7
High
CVE-2026-20169
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an…
6.4
Medium
CVE-2026-20168
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an…
6.5
Medium
CVE-2020-3392
A vulnerability in the API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker…
7.5
High