7.5
High
CVE-2020-3392 A vulnerability in the API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker…
Description
A vulnerability in the API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to view sensitive information on an affected system. The vulnerability exists because the affected software does not properly authenticate API calls. An attacker could exploit this vulnerability by sending API requests to an affected system. A successful exploit could allow the attacker to view sensitive information on the affected system, including information about the devices that the system manages, without authentication.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco IoT Field Network Director (IoT-FND) | Versions not published |
Other CVEs of Cisco IoT Field Network Director (IoT-FND)
The 17 CVEs of Cisco IoT Field Network Director (IoT-FND) →
CVE-2026-20167
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an…
7.7
High
CVE-2026-20169
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an…
6.4
Medium
CVE-2026-20168
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an…
6.5
Medium
CVE-2020-3531
A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote…
9.8
Critical