Cisco IoT Field Network Director Path Traversal Vulnerability

A path traversal vulnerability has been identified in the web-based management interface of Cisco IoT Field Network Director. This vulnerability allows an authenticated, remote attacker with low privileges to access files that they are not authorized to retrieve. The issue arises from inadequate file access validation, enabling attackers to exploit the vulnerability by sending crafted input through the management interface. Successful exploitation could result in unauthorized file access.

Impact

Exploitation of this vulnerability could lead to unauthorized access to files that the attacker does not have permission to view.

Remediation

Cisco has released software updates to address this vulnerability. Users should upgrade to version 5.0.0-117 or migrate to a supported release that includes the fix. For more information on Cisco software releases, consult the Cisco Security Vulnerability Policy.