CVE-2019-1940

CVE-2019-1940 describes a medium-severity vulnerability in Cisco Industrial Network Director (IND) versions prior to 1.7, specifically within its Web Services Management Agent (WSMA) feature. This flaw stems from insufficient X.509 certificate validation, allowing an unauthenticated, remote attacker to gain unauthorized read access to sensitive data. Exploitation involves supplying a crafted X.509 certificate during WSMA connection setup, enabling man-in-the-middle attacks to decrypt confidential information. While the CVSS score is 5.9 (Medium) with high confidentiality impact, there is no evidence of active exploitation, public exploit code, or significant community discussion.