Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco IoT Field Network Director Cross-Site Scripting Vulnerabilities
Vulnerability Description
Multiple vulnerabilities in the web UI of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against users on an affected system. The vulnerabilities are due to insufficient validation of user-supplied input that is processed by the web UI. An attacker could exploit these vulnerabilities by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information on an affected system.
CVSS Information
N/A
Vulnerability Type
输出中的特殊元素转义处理不恰当(注入)
Vulnerability Title
Cisco IoT Field Network Director 注入漏洞
Vulnerability Description
Cisco IoT Field Network Director（IoT-FND）是美国思科（Cisco）公司的一套端到端的物联网管理系统。该系统具有设备管理、资产跟踪和智能计量等功能。 Cisco IoT Field Network Director 存在注入漏洞，该漏洞源于web UI处理的用户提供的输入没有得到充分的验证。攻击者可利用该漏洞对受影响系统上的用户进行跨站脚本攻击。成功的利用可以允许攻击者在界面上下文中执行任意脚本代码，或者访问受影响系统上敏感的、基于浏览器的信息。
CVSS Information
N/A
Vulnerability Type
N/A