4.1.3

DATE	CVE	VULNERABILITY TITLE	RISK
2020-11-18	CVE-2020-26072	Improper Privilege Management vulnerability in Cisco IOT Field Network Director A vulnerability in the SOAP API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to access and modify information on devices that belong to a different domain. network low complexity cisco CWE-269	8.7
2020-04-15	CVE-2020-3162	Improper Input Validation vulnerability in Cisco IOT Field Network Director A vulnerability in the Constrained Application Protocol (CoAP) implementation of Cisco IoT Field Network Director could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition on an affected device. network low complexity cisco CWE-20	7.5
2019-08-08	CVE-2019-1957	Unspecified vulnerability in Cisco IOT Field Network Director A vulnerability in the web interface of Cisco IoT Field Network Director could allow an unauthenticated, remote attacker to trigger high CPU usage, resulting in a denial of service (DoS) condition on an affected device. network low complexity cisco	7.5
2019-02-21	CVE-2019-1698	XXE vulnerability in Cisco IOT Field Network Director A vulnerability in the web-based user interface of Cisco Internet of Things Field Network Director (IoT-FND) Software could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. network low complexity cisco CWE-611	4.9