Known vulnerabilities in ConfD

Vendor: Cisco Systems, Inc
Software: ConfD
Software CPE: cpe:2.3:a:cisco_systems:confd:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 5
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ConfD ConfD is affected by 5 known vulnerabilities: 1 critical, 1 medium, 3 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107594 - Missing Authentication for Critical Function
CVE-2025-32433		 CWE-306 Critical
Available
Exploited
 - 17.04.2025 SB2025041757
SB2025041763
SB2025042002
and 9 more
#VU97228 - Improper Authentication
CVE-2024-20381		 CWE-287 Medium
No
No
 7.5.10.2, 7.7.16, 8.0.13 13.09.2024 SB2024091311
#VU89578 - Incorrect Privilege Assignment
CVE-2024-20389		 CWE-266 Low
No
No
 8.0.12 16.05.2024 SB2024051610
SB2024051620
#VU89570 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-20326		 CWE-78 Low
No
No
 7.5.10.2, 7.6.14.2, 7.7.15, 7.8.13.1, 8.0.12 16.05.2024 SB2024051610
SB2024051620
#VU59955 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-20655		 CWE-78 Low
No
No
 6.3.9.1, 6.4.7.2, 6.4.8, 6.5.7, 6.6.2, 6.7.1 24.01.2022 SB2022012410
SB2022012512