4.9 Moyenne

CVE-2019-1698 A vulnerability in the web-based user interface of Cisco Internet of Things Field Network Director (IoT-FND) Software…

Description

A vulnerability in the web-based user interface of Cisco Internet of Things Field Network Director (IoT-FND) Software could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by importing a crafted XML file with malicious entries, which could allow the attacker to read files within the affected application. Versions prior to 4.4(0.26) are affected.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco IoT Field Network Director (IoT-FND)	Versions non publiées

Références

20190220 Cisco IoT Field Network Director XML External Entity Vulnerability tools.cisco.com
107093 www.securityfocus.com

Chronologie

Publiée 21 février 2019
Dernière modification 21 novembre 2024

Les 17 CVE de Cisco IoT Field Network Director (IoT-FND) →

CVE-2026-20167 A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an… 7.7 Élevée CVE-2026-20168 A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an… 6.5 Moyenne CVE-2026-20169 A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an… 6.4 Moyenne CVE-2020-3531 A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote… 9.8 Critique

Suivre cette CVE