CVE-2020-3531

Name of the Vulnerable Software and Affected Versions: Cisco IoT Field Network Director (affected versions not specified)

Description: A vulnerability in the REST API of Cisco IoT Field Network Director could allow an unauthenticated, remote attacker to access the back-end database of an affected system. The issue exists due to the software not properly authenticating REST API calls. An attacker could exploit this by obtaining a cross-site request forgery (CSRF) token and using it with REST API requests, potentially allowing access to the back-end database to read, alter, or drop information.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.