Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-26078

Опубликовано: 18 нояб. 2020
Источник: nvd
CVSS3: 4.9
CVSS3: 6.5
CVSS2: 5.5
EPSS Низкий

Описание

A vulnerability in the file system of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to overwrite files on an affected system. The vulnerability is due to insufficient file system protections. An attacker could exploit this vulnerability by crafting API requests and sending them to an affected system. A successful exploit could allow the attacker to overwrite files on an affected system.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:cisco:iot_field_network_director:*:*:*:*:*:*:*:*
Версия до 4.6.1 (исключая)

EPSS

Процентиль: 44%
0.00215
Низкий

4.9 Medium

CVSS3

6.5 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-73
CWE-22

Связанные уязвимости

github
больше 3 лет назад

A vulnerability in the file system of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to overwrite files on an affected system. The vulnerability is due to insufficient file system protections. An attacker could exploit this vulnerability by crafting API requests and sending them to an affected system. A successful exploit could allow the attacker to overwrite files on an affected system.

CVSS3: 4.9
fstec
около 5 лет назад

Уязвимость файловой системы программного средства управления сетью IoT Field Network Director, позволяющая нарушителю получить доступ на изменение, добавление или удаление данных

EPSS

Процентиль: 44%
0.00215
Низкий

4.9 Medium

CVSS3

6.5 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-73
CWE-22