What is CVE-2020-26084?

CVE-2020-26084 is a medium-severity vulnerability in Cisco Edge Fog Fabric, classified under Exposure of Resource to Wrong Sphere. CVSS score: 6.5/10. Published 2020-11-06.

How severe is CVE-2020-26084?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Cisco Edge Fog Fabric

CVE-2020-26084

A vulnerability in the REST API of Cisco Edge Fog Fabric could allow an authenticated, remote attacker to access files outside of their authorization sphere on an affected device. The vulnerability is due to incorrect authorization enforcement on an affected system. An attacker could exploit this vulnerability by sending a crafted request to the API. A successful exploit could allow the attacker to overwrite arbitrary files on the affected device.

EPSS: 0.009 (55.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N.

Affected products

Cisco Edge Fog Fabric — versions n/a
Cisco Edge_fog_fabric

Weakness classification (CWE)

CWE-668 — Exposure of Resource to Wrong Sphere

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2020-26084?: CVE-2020-26084 is a medium-severity vulnerability in Cisco Edge Fog Fabric, classified under Exposure of Resource to Wrong Sphere. CVSS score: 6.5/10. Published 2020-11-06.
How severe is CVE-2020-26084?: Medium severity. CVSS v3 base score is 6.5 out of 10.