ID
VAR-202605-6902
CVE
CVE-2026-20169
TITLE
Cisco Systems Cisco IoT Field Network Director Command injection vulnerability in
Trust: 0.8
DESCRIPTION
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to access files and execute commands on a remote router. This vulnerability is due to insufficient input validation of user-supplied data. An attacker could exploit this vulnerability by submitting crafted input in the web-based management interface. A successful exploit could allow the attacker to create, read, or delete files and execute limited commands in user EXEC mode on a remote router. EXEC This can be done in mode.- Some of the information handled by the software may be leaked to external parties. - Some of the information handled by the software may be overwritten. - The software will not stop
Trust: 1.62
AFFECTED PRODUCTS
| vendor: | cisco | model: | iot field network director | scope: | lt | version: | 5.0.0-117 | Trust: 1.0 |
| vendor: | シスコシステムズ | model: | cisco iot field network director | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | cisco iot field network director | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | cisco iot field network director | scope: | eq | version: | 5.0.0-117 | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-77 | Trust: 1.0 |
| problemtype: | Command injection (CWE-77) [ others ] | Trust: 0.8 |
PATCH
| title: | Cisco IoT Field Network Director Vulnerabilities | url: | https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iot-fnd-dos-n8N26Q4u | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2026-20169 | Trust: 2.6 |
| db: | JVNDB | id: | JVNDB-2026-021612 | Trust: 0.8 |
REFERENCES
| url: | https://sec.cloudapps.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-iot-fnd-dos-n8n26q4u | Trust: 1.0 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2026-20169 | Trust: 0.8 |
SOURCES
| db: | JVNDB | id: | JVNDB-2026-021612 |
| db: | NVD | id: | CVE-2026-20169 |
LAST UPDATE DATE
2026-07-04T23:49:24.043000+00:00
SOURCES UPDATE DATE
| db: | JVNDB | id: | JVNDB-2026-021612 | date: | 2026-06-30T02:23:00 |
| db: | NVD | id: | CVE-2026-20169 | date: | 2026-06-29T17:28:14.693 |
SOURCES RELEASE DATE
| db: | JVNDB | id: | JVNDB-2026-021612 | date: | 2026-06-30T00:00:00 |
| db: | NVD | id: | CVE-2026-20169 | date: | 2026-05-06T17:16:20.743 |