Cisco Industrial Network Director Vulnerabilities
Multiple vulnerabilities in Cisco Industrial Network Director (IND) could allow an authenticated attacker to inject arbitrary operating system commands or access sensitive data. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-20039US | medium5.5OT elevated | — | ||
A vulnerability in Cisco IND could allow an authenticated, local attacker to read application data.
This vulnerability is due to insufficient default file permissions that are a… | ||||
| CVE-2023-20036US | — | — | ||
A vulnerability in the web UI of Cisco IND could allow an authenticated, remote attacker to execute arbitrary commands with administrative privileges on the underlying operating sy… | ||||
references
External citations — patches, advisories, analysis.
- Security Vulnerability Policyexternal
- CSCwc29352external
- CSCwc29354external
- Cisco Industrial Network Director Vulnerabilitiesself
- Cisco Security Vulnerability Policyexternal
- considering software upgradesexternal
- free software updatesexternal
- https://www.cisco.com/c/en/us/products/end-user-license-agreement.htmlexternal
remediations (2)
- FixedCisco Industrial Network Director
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Industrial Network Director
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan