What’s Vulnerable › Vulnerabilities

CVE-2020-26084: Cisco Edge Fog Fabric Resource Exposure Vulnerability

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-11-06 · updated 2026-06-17
• Weakness: CWE-668

Description

A vulnerability in the REST API of Cisco Edge Fog Fabric could allow an authenticated, remote attacker to access files outside of their authorization sphere on an affected device. The vulnerability is due to incorrect authorization enforcement on an affected system. An attacker could exploit this vulnerability by sending a crafted request to the API. A successful exploit could allow the attacker to overwrite arbitrary files on the affected device.

Affected products

• Cisco Edge Fog Fabric: before 1.7.4 — fixed in 1.7.4

How to fix

Upgrade to a fixed version: Cisco Edge Fog Fabric 1.7.4. Check the vendor advisory for mitigations.

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-eff-incperm-9E6h4yBz
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-eff-incperm-9E6h4yBz

Get alerted when CVE-2020-26084 or the next vulnerability affects your stack