Cisco IoT Field Network Director Vulnerabilities
🔗 CVE IDs covered (3)
📋 Description
Multiple vulnerabilities in the web-based management interface of Cisco IoT Field Network Director Software could allow an authenticated, remote attacker to access files, execute commands, and cause denial of service (DoS) conditions on managed routers.
For more information about these vulnerabilities, see the Details ["#details"] section of this advisory.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
CVE-2026-20167 — Cisco IoT Field Network Director Remote Device Denial of Service Vulnerability (CVSS 3.1 7.7, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) CVE-2026-20168 — Cisco IoT Field Network Director Path Traversal Vulnerability (CVSS 3.1 6.5, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) CVE-2026-20169 — Cisco IoT Field Network Director Command Injection Vulnerability (CVSS 3.1 6.4, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)
🎯 Affected products31
- Cisco IoT Field Network Director (IoT-FND)
- Cisco IoT Field Network Director (IoT-FND) 4.1.0
- Cisco IoT Field Network Director (IoT-FND) 4.1.1
- Cisco IoT Field Network Director (IoT-FND) 4.1.2
- Cisco IoT Field Network Director (IoT-FND) 4.1.3
- Cisco IoT Field Network Director (IoT-FND) 4.10.0
- Cisco IoT Field Network Director (IoT-FND) 4.11.0
- Cisco IoT Field Network Director (IoT-FND) 4.12.0
- Cisco IoT Field Network Director (IoT-FND) 4.12.1
- Cisco IoT Field Network Director (IoT-FND) 4.2.0
- Cisco IoT Field Network Director (IoT-FND) 4.3.0
- Cisco IoT Field Network Director (IoT-FND) 4.3.1
- Cisco IoT Field Network Director (IoT-FND) 4.3.2
- Cisco IoT Field Network Director (IoT-FND) 4.4.0
- Cisco IoT Field Network Director (IoT-FND) 4.4.1
- Cisco IoT Field Network Director (IoT-FND) 4.4.2
- Cisco IoT Field Network Director (IoT-FND) 4.4.3
- Cisco IoT Field Network Director (IoT-FND) 4.4.4
- Cisco IoT Field Network Director (IoT-FND) 4.5.0
- Cisco IoT Field Network Director (IoT-FND) 4.5.1
- Cisco IoT Field Network Director (IoT-FND) 4.6.0
- Cisco IoT Field Network Director (IoT-FND) 4.6.1
- Cisco IoT Field Network Director (IoT-FND) 4.6.2
- Cisco IoT Field Network Director (IoT-FND) 4.7.0
- Cisco IoT Field Network Director (IoT-FND) 4.7.1
- Cisco IoT Field Network Director (IoT-FND) 4.7.2
- Cisco IoT Field Network Director (IoT-FND) 4.8.0
- Cisco IoT Field Network Director (IoT-FND) 4.8.1
- Cisco IoT Field Network Director (IoT-FND) 4.9.0
- Cisco IoT Field Network Director (IoT-FND) 4.9.1
- +1 more not shown
✅ Remediation
Cisco has released software updates that address this vulnerability. https://software.cisco.com Workarounds: There are no workarounds that address these vulnerabilities.
🔗 References (6)
- advisoryhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iot-fnd-dos-n8N26Q4u
- csafhttps://www.cisco.com/.well-known/csaf/2026/cisco-sa-iot-fnd-dos-n8n26q4u.json
- externalhttps://bst.cloudapps.cisco.com/bugsearch/bug/CSCwm81015
- externalhttps://bst.cloudapps.cisco.com/bugsearch/bug/CSCwm81008
- externalhttps://bst.cloudapps.cisco.com/bugsearch/bug/CSCwm80968
- externalhttps://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/iot-field-network-director/softwarep-lifecycle-support-fnd-pb.html#RecommendedRelease