PT-2026-37651 · Cisco · Iot Field Network Director

Ben Sina · Published 2026-05-06 · Updated 2026-05-06 · CVE-2026-20168

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco IoT Field Network Director (affected versions not specified)

Description Insufficient file access checks in the web-based management interface allow an authenticated, remote attacker with low privileges to retrieve files they are not authorized to access by submitting crafted input.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-388

Related Identifiers

BDU:2026-06548

CVE-2026-20168

Affected Products

Iot Field Network Director

References · 5

• https://bdu.fstec.ru/vul/2026-06548 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-20168 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iot-fnd-dos-n8N26Q4u · Vendor Advisory
• https://twitter.com/infoflowcloud/status/2052087459119345899 · Twitter Post
• https://twitter.com/CVEnew/status/2052086718564798570 · Twitter Post