CVE-2020-26078 — Cisco IoT Field Network Director File Overwrite Vulnerability

Description (CNA)

A vulnerability in the file system of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to overwrite files on an affected system. The vulnerability is due to insufficient file system protections. An attacker could exploit this vulnerability by crafting API requests and sending them to an affected system. A successful exploit could allow the attacker to overwrite files on an affected system.

Affected (CNA)

Vendor / product	Versions
Cisco / Cisco IoT Field Network Director (IoT-FND)	affected n/a

CWE

CWE-73

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-FND-OVW-SHzOE3Pd

ADP enrichment

CVE

No English description supplied.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-FND-OVW-SHzOE3Pd

CISA-ADP

No English description supplied.

No references supplied.