CVE-2020-26084

Medium

Description

A vulnerability in the REST API of Cisco Edge Fog Fabric could allow an authenticated, remote attacker to access files outside of their authorization sphere on an affected device. The vulnerability is due to incorrect authorization enforcement on an affected system. An attacker could exploit this vulnerability by sending a crafted request to the API. A successful exploit could allow the attacker to overwrite arbitrary files on the affected device.

SeverityMedium

CVSS6.5

Exploit probability—

Product

Cisco Edge Fog Fabric

PublishedNov 6, 2020

First seenNov 6, 2020

Weakness typeCWE-668CWE-668

How to fix

Update

cisco edge_fog_fabric1.7.4 or later

Vendor advisories

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-eff-incperm-9E6h4yBz

Affected products

Product	Affected versions	Fixed in
cisco edge_fog_fabric	v < 1.7.4	1.7.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.