CVE-2026-20169
Full vulnerability record from the local CVENow database.
Description
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to access files and execute commands on a remote router. This vulnerability is due to insufficient input validation of user-supplied data. An attacker could exploit this vulnerability by submitting crafted input in the web-based management interface. A successful exploit could allow the attacker to create, read, or delete files and execute limited commands in user EXEC mode on a remote router.
Severity
MEDIUM
CVSS score
6.4
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-05-06 17:16:20.743000
Last modified
2026-10-26 19:10:00.163000
View original CVE JSON
{
"id": "CVE-2026-20169",
"sourceIdentifier": "[email protected]",
"published": "2026-05-06T17:16:20.743",
"lastModified": "2026-10-26T19:10:00.163",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to access files and execute commands on a remote router.\r\n\r\nThis vulnerability is due to insufficient input validation of user-supplied data. An attacker could exploit this vulnerability by submitting crafted input in the web-based management interface. A successful exploit could allow the attacker to create, read, or delete files and execute limited commands in user EXEC mode on a remote router."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la interfaz de gestión basada en web de Cisco IoT Field Network Director podría permitir a un atacante remoto autenticado con privilegios bajos acceder a archivos y ejecutar comandos en un router remoto.\n\nEsta vulnerabilidad se debe a una validación de entrada insuficiente de los datos proporcionados por el usuario. Un atacante podría explotar esta vulnerabilidad al enviar una entrada manipulada en la interfaz de gestión basada en web. Un exploit exitoso podría permitir al atacante crear, leer o eliminar archivos y ejecutar comandos limitados en modo EXEC de usuario en un router remoto."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco IoT Field Network Director (IoT-FND)",
"defaultStatus": "unknown",
"versions": [
{
"version": "4.5.1",
"status": "affected"
},
{
"version": "4.4.3",
"status": "affected"
},
{
"version": "4.1.0",
"status": "affected"
},
{
"version": "4.1.3",
"status": "affected"
},
{
"version": "4.6.1",
"status": "affected"
},
{
"version": "4.1.1",
"status": "affected"
},
{
"version": "4.4.0",
"status": "affected"
},
{
"version": "4.2.0",
"status": "affected"
},
{
"version": "4.4.2",
"status": "affected"
},
{
"version": "4.3.0",
"status": "affected"
},
{
"version": "4.6.0",
"status": "affected"
},
{
"version": "4.4.4",
"status": "affected"
},
{
"version": "4.3.2",
"status": "affected"
},
{
"version": "4.1.2",
"status": "affected"
},
{
"version": "4.4.1",
"status": "affected"
},
{
"version": "4.5.0",
"status": "affected"
},
{
"version": "4.3.1",
"status": "affected"
},
{
"version": "4.7.0",
"status": "affected"
},
{
"version": "4.6.2",
"status": "affected"
},
{
"version": "4.7.1",
"status": "affected"
},
{
"version": "4.7.2",
"status": "affected"
},
{
"version": "4.8.0",
"status": "affected"
},
{
"version": "4.8.1",
"status": "affected"
},
{
"version": "4.9.0",
"status": "affected"
},
{
"version": "4.9.1",
"status": "affected"
},
{
"version": "4.10.0",
"status": "affected"
},
{
"version": "4.9.2",
"status": "affected"
},
{
"version": "4.11.0",
"status": "affected"
},
{
"version": "4.12.0",
"status": "affected"
},
{
"version": "4.12.1",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 2.7
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-05-06T17:26:38.558371Z",
"id": "CVE-2026-20169",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-77"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:iot_field_network_director:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.0.0-117",
"matchCriteriaId": "AFAEB500-F901-497A-8E7A-13F350338E83"
}
]
}
]
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iot-fnd-dos-n8N26Q4u",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}