CVE-2026-20168

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to retrieve files that they do not have permission to access. This vulnerability is due to insufficient file access checks. An attacker could exploit this vulnerability by submitting crafted input in the web-based management interface. A successful exploit could allow the attacker to read files that they are not authorized to access.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iot-fnd-dos-n8N26Q4u	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:cisco:iot_field_network_director:*:*:*:*:*:*:*:*

History

26 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad en la interfaz de gestión basada en web de Cisco IoT Field Network Director podría permitir a un atacante remoto autenticado con privilegios bajos recuperar archivos a los que no tiene permiso para acceder. Esta vulnerabilidad se debe a comprobaciones insuficientes de acceso a archivos. Un atacante podría explotar esta vulnerabilidad al enviar una entrada manipulada en la interfaz de gestión basada en web. Un exploit exitoso podría permitir al atacante leer archivos a los que no está autorizado a acceder.

Information

Published : 2026-05-06 17:16

Updated : 2026-10-26 19:10

NVD link : CVE-2026-20168

Mitre link : CVE-2026-20168

CVE.ORG link : CVE-2026-20168

JSON object : View

Products Affected

cisco

iot_field_network_director

CWE

CWE-388

7PK - Errors

{"id": "CVE-2026-20168", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20168", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-06T17:59:03.972223Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Cisco", "product": "Cisco IoT Field Network Director (IoT-FND)", "versions": [{"status": "affected", "version": "4.5.1"}, {"status": "affected", "version": "4.4.3"}, {"status": "affected", "version": "4.1.0"}, {"status": "affected", "version": "4.1.3"}, {"status": "affected", "version": "4.6.1"}, {"status": "affected", "version": "4.1.1"}, {"status": "affected", "version": "4.4.0"}, {"status": "affected", "version": "4.2.0"}, {"status": "affected", "version": "4.4.2"}, {"status": "affected", "version": "4.3.0"}, {"status": "affected", "version": "4.6.0"}, {"status": "affected", "version": "4.4.4"}, {"status": "affected", "version": "4.3.2"}, {"status": "affected", "version": "4.1.2"}, {"status": "affected", "version": "4.4.1"}, {"status": "affected", "version": "4.5.0"}, {"status": "affected", "version": "4.3.1"}, {"status": "affected", "version": "4.7.0"}, {"status": "affected", "version": "4.6.2"}, {"status": "affected", "version": "4.7.1"}, {"status": "affected", "version": "4.7.2"}, {"status": "affected", "version": "4.8.0"}, {"status": "affected", "version": "4.8.1"}, {"status": "affected", "version": "4.9.0"}, {"status": "affected", "version": "4.9.1"}, {"status": "affected", "version": "4.10.0"}, {"status": "affected", "version": "4.9.2"}, {"status": "affected", "version": "4.11.0"}, {"status": "affected", "version": "4.12.0"}, {"status": "affected", "version": "4.12.1"}], "defaultStatus": "unknown"}]}], "published": "2026-05-06T17:16:20.590", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iot-fnd-dos-n8N26Q4u", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-388"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to retrieve files that they do not have permission to access.\r\n\r\nThis vulnerability is due to insufficient file access checks. An attacker could exploit this vulnerability by submitting crafted input in the web-based management interface. A successful exploit could allow the attacker to read files that they are not authorized to access."}, {"lang": "es", "value": "Una vulnerabilidad en la interfaz de gesti\u00f3n basada en web de Cisco IoT Field Network Director podr\u00eda permitir a un atacante remoto autenticado con privilegios bajos recuperar archivos a los que no tiene permiso para acceder.\n\nEsta vulnerabilidad se debe a comprobaciones insuficientes de acceso a archivos. Un atacante podr\u00eda explotar esta vulnerabilidad al enviar una entrada manipulada en la interfaz de gesti\u00f3n basada en web. Un exploit exitoso podr\u00eda permitir al atacante leer archivos a los que no est\u00e1 autorizado a acceder."}], "lastModified": "2026-10-26T19:10:00.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:iot_field_network_director:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AFAEB500-F901-497A-8E7A-13F350338E83", "versionEndExcluding": "5.0.0-117"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@cisco.com"}