6.4
Medium
CVE-2026-20169 A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an…
Description
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to access files and execute commands on a remote router. This vulnerability is due to insufficient input validation of user-supplied data. An attacker could exploit this vulnerability by submitting crafted input in the web-based management interface. A successful exploit could allow the attacker to create, read, or delete files and execute limited commands in user EXEC mode on a remote router.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco IoT Field Network Director (IoT-FND) 4.12 | 4.12.0 → 4.12.1 | No fix stated |
| Cisco IoT Field Network Director (IoT-FND) | 4.11.0 | No fix stated |
| Cisco IoT Field Network Director (IoT-FND) | 4.10.0 | No fix stated |
| Cisco IoT Field Network Director (IoT-FND) 4.9 | 4.9.0 → 4.9.2 | No fix stated |
| Cisco IoT Field Network Director (IoT-FND) 4.8 | 4.8.0 → 4.8.1 | No fix stated |
| Cisco IoT Field Network Director (IoT-FND) 4.7 | 4.7.0 → 4.7.2 | No fix stated |
| Cisco IoT Field Network Director (IoT-FND) 4.6 | 4.6.0 → 4.6.2 | No fix stated |
| Cisco IoT Field Network Director (IoT-FND) 4.5 | 4.5.0 → 4.5.1 | No fix stated |
| Cisco IoT Field Network Director (IoT-FND) 4.4 | 4.4.0 → 4.4.4 | No fix stated |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco IoT Field Network Director (IoT-FND) 4.3 | 4.3.0 → 4.3.2 | No fix stated |
| Cisco IoT Field Network Director (IoT-FND) | 4.2.0 | No fix stated |
| Cisco IoT Field Network Director (IoT-FND) 4.1 | 4.1.0 → 4.1.3 | No fix stated |
References
- cisco-sa-iot-fnd-dos-n8N26Q4u sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco IoT Field Network Director (IoT-FND)
The 17 CVEs of Cisco IoT Field Network Director (IoT-FND) →
CVE-2026-20167
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an…
7.7
High
CVE-2026-20168
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an…
6.5
Medium
CVE-2020-3531
A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote…
9.8
Critical
CVE-2020-3392
A vulnerability in the API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker…
7.5
High