Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Industrial Network Director File Permissions
Vulnerability Description
A vulnerability in Cisco IND could allow an authenticated, local attacker to read application data. This vulnerability is due to insufficient default file permissions that are applied to the application data directory. An attacker could exploit this vulnerability by accessing files in the application data directory. A successful exploit could allow the attacker to view sensitive information. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Vulnerability Type
对外部实体的文件或目录可访问
Vulnerability Title
Cisco Industrial Network Director 安全漏洞
Vulnerability Description
Cisco Industrial Network Director（IND）是美国思科（Cisco）公司的一套工业自动化管理系统。该系统通过对工业以太网基础设施的可视化操作来实现自动化管理。 Cisco Industrial Network Director存在安全漏洞，该漏洞源于对应用程序数据目录应用的默认文件权限不足。经过身份验证的本地攻击者利用该漏洞能够读取应用程序数据。
CVSS Information
N/A
Vulnerability Type
N/A