Description
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to access files and execute commands on a remote router. This vulnerability is due to insufficient input validation of user-supplied data. An attacker could exploit this vulnerability by submitting crafted input in the web-based management interface. A successful exploit could allow the attacker to create, read, or delete files and execute limited commands in user EXEC mode on a remote router.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Cisco Cisco IoT Field Network Director (IoT-FND)
Default version status: unknown
4.5.1affected4.4.3affected4.1.0affected4.1.3affected4.6.1affected4.1.1affected4.4.0affected4.2.0affected4.4.2affected4.3.0affected4.6.0affected4.4.4affected4.3.2affected4.1.2affected4.4.1affected4.5.0affected4.3.1affected4.7.0affected4.6.2affected4.7.1affected4.7.2affected4.8.0affected4.8.1affected4.9.0affected4.9.1affected4.10.0affected4.9.2affected4.11.0affected4.12.0affected4.12.1affected