6.5
Moyenne
CVE-2026-20168 A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an…
Description
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to retrieve files that they do not have permission to access. This vulnerability is due to insufficient file access checks. An attacker could exploit this vulnerability by submitting crafted input in the web-based management interface. A successful exploit could allow the attacker to read files that they are not authorized to access.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco IoT Field Network Director (IoT-FND) 4.12 | 4.12.0 → 4.12.1 | Pas de correctif indiqué |
| Cisco IoT Field Network Director (IoT-FND) | 4.11.0 | Pas de correctif indiqué |
| Cisco IoT Field Network Director (IoT-FND) | 4.10.0 | Pas de correctif indiqué |
| Cisco IoT Field Network Director (IoT-FND) 4.9 | 4.9.0 → 4.9.2 | Pas de correctif indiqué |
| Cisco IoT Field Network Director (IoT-FND) 4.8 | 4.8.0 → 4.8.1 | Pas de correctif indiqué |
| Cisco IoT Field Network Director (IoT-FND) 4.7 | 4.7.0 → 4.7.2 | Pas de correctif indiqué |
| Cisco IoT Field Network Director (IoT-FND) 4.6 | 4.6.0 → 4.6.2 | Pas de correctif indiqué |
| Cisco IoT Field Network Director (IoT-FND) 4.5 | 4.5.0 → 4.5.1 | Pas de correctif indiqué |
| Cisco IoT Field Network Director (IoT-FND) 4.4 | 4.4.0 → 4.4.4 | Pas de correctif indiqué |
Afficher les 3 autres branches Masquer les 3 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco IoT Field Network Director (IoT-FND) 4.3 | 4.3.0 → 4.3.2 | Pas de correctif indiqué |
| Cisco IoT Field Network Director (IoT-FND) | 4.2.0 | Pas de correctif indiqué |
| Cisco IoT Field Network Director (IoT-FND) 4.1 | 4.1.0 → 4.1.3 | Pas de correctif indiqué |
Références
- cisco-sa-iot-fnd-dos-n8N26Q4u sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco IoT Field Network Director (IoT-FND)
Les 17 CVE de Cisco IoT Field Network Director (IoT-FND) →
CVE-2026-20167
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an…
7.7
Élevée
CVE-2026-20169
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an…
6.4
Moyenne
CVE-2020-3531
A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote…
9.8
Critique
CVE-2020-3392
A vulnerability in the API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker…
7.5
Élevée