PT-2026-37652 · Cisco · Iot Field Network Director

Ben Sina · Published 2026-05-06 · Updated 2026-05-06 · CVE-2026-20169

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco IoT Field Network Director (affected versions not specified)

Description Insufficient input validation of user-supplied data in the web-based management interface allows an authenticated remote attacker with low privileges to submit crafted input. This could enable the attacker to access, create, read, or delete files and execute limited commands in user EXEC mode on a remote router.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2026-06546

CVE-2026-20169

Affected Products

Iot Field Network Director

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-20169 · Security Note
• https://bdu.fstec.ru/vul/2026-06546 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iot-fnd-dos-n8N26Q4u · Vendor Advisory
• https://twitter.com/CVEnew/status/2052086717717618987 · Twitter Post
• https://twitter.com/infoflowcloud/status/2052087446335000610 · Twitter Post