Cisco Connected Grid Network Management System vulnerabilities

2 known vulnerabilities affecting cisco/connected_grid_network_management_system.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2017-6780HIGHCVSS 7.5≤ 3.0\(0.54\)2017-09-07

CVE-2017-6780 [HIGH] CWE-399 CVE-2017-6780: A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could a A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventually forcing the device to restart, aka Memory Exhaustion. The vulnerability is due to insufficient rate-limiting protection. An attacker could exploit this v

CVE-2015-6362MEDIUMCVSS 4.0v3.0\(0.35\)v3.0\(0.54\)2015-11-10

CVE-2015-6362 [MEDIUM] CWE-264 CVE-2015-6362: The web GUI in Cisco Connected Grid Network Management System (CG-NMS) 3.0(0.35) and 3.0(0.54) allow The web GUI in Cisco Connected Grid Network Management System (CG-NMS) 3.0(0.35) and 3.0(0.54) allows remote authenticated users to bypass intended access restrictions and modify the configuration by leveraging the Monitor-Only role, aka Bug ID CSCuw42640.