This vulnerability arises from improper error handling in Cisco IoT Field Network Director's web management interface. An authenticated attacker with low privileges can exploit this by submitting specially crafted input to the interface, causing unauthorized file requests on a remote router. The result is a forced reload of the router, leading to a denial-of-service condition. The vulnerability impacts numerous versions of IoT-FND, including 4.1.0 through 4.12.1. The CVSS 3.1 base score is 7.7, reflecting network attack vector, low attack complexity, required privileges, no user interaction, scope change, no confidentiality or integrity impact, but high availability impact. There is no vendor advisory or patch information currently available.

Successful exploitation results in a denial-of-service condition on a remotely managed router by forcing it to reload. This disrupts availability but does not impact confidentiality or integrity of data. The attacker must be authenticated with low privileges to exploit this vulnerability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the Cisco vendor advisory for current remediation guidance. Until a fix is available, restrict access to the web-based management interface to trusted users only and monitor for unusual activity. No official mitigation or temporary fix has been documented.