PT-2020-4950 · Cisco · Cisco Iot Field Network Director

Published 2020-11-18 · Updated 2020-11-25 · CVE-2020-26078

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions: Cisco IoT Field Network Director (affected versions not specified)

Description: The issue is related to insufficient file system protections, allowing an authenticated, remote attacker to overwrite files on an affected system. This can be achieved by crafting API requests and sending them to the affected system. A successful exploit could allow the attacker to modify, add, or delete data.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-73

CWE-22

Related Identifiers

BDU:2020-05525

CVE-2020-26078

Affected Products

Cisco Iot Field Network Director

References · 6

• https://bdu.fstec.ru/vul/2020-05525 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-26078 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-FND-OVW-SHzOE3Pd · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-26078 · Vendor Advisory
• https://t.me/cibsecurity/16526 · Telegram Post
• https://t.me/cvenotify/6216 · Telegram Post