CVE-2026-20168

Cisco IoT Field Network Director Path Traversal Vulnerability

Published May 6, 2026 CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Description

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to retrieve files that they do not have permission to access.

This vulnerability is due to insufficient file access checks. An attacker could exploit this vulnerability by submitting crafted input in the web-based management interface. A successful exploit could allow the attacker to read files that they are not authorized to access.

Analysis

Technical impact

The vulnerability stems from a lack of proper file access checks in the web-based management interface of Cisco IoT Field Network Director, allowing an authenticated user with low privileges to retrieve arbitrary files. The flaw permits reading files that the user should not have permission to access, leading to potential exposure of sensitive configuration data, credentials, or proprietary information. It is classified as a CWE-388 Security Misconfiguration.

Affected Systems

Affected product is Cisco IoT Field Network Director (IoT-FND). No version information is provided, so any deployment of this product is potentially vulnerable until a patch is applied.

Risk and Exploitability

The CVSS score of 6.5 indicates moderate severity. The vulnerability is not listed in CISA's KEV catalog, indicating no known widespread exploitation. The flaw requires authentication and low privileges, meaning only compromised or poorly protected accounts can exploit it. An attacker with such access could read configuration files and other sensitive data. The likely attack vector is remote, via the web-based management interface.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Cisco

Cisco IoT Field Network Director (IoT-FND)

unknown

Version	Status	Constraints
`4.5.1`	affected	—
`4.4.3`	affected	—
`4.1.0`	affected	—
`4.1.3`	affected	—
`4.6.1`	affected	—
`4.1.1`	affected	—
`4.4.0`	affected	—
`4.2.0`	affected	—
`4.4.2`	affected	—
`4.3.0`	affected	—
`4.6.0`	affected	—
`4.4.4`	affected	—
`4.3.2`	affected	—
`4.1.2`	affected	—
`4.4.1`	affected	—
`4.5.0`	affected	—
`4.3.1`	affected	—
`4.7.0`	affected	—
`4.6.2`	affected	—
`4.7.1`	affected	—
`4.7.2`	affected	—
`4.8.0`	affected	—
`4.8.1`	affected	—
`4.9.0`	affected	—
`4.9.1`	affected	—
`4.10.0`	affected	—
`4.9.2`	affected	—
`4.11.0`	affected	—
`4.12.0`	affected	—
`4.12.1`	affected	—

Configuration 1 [-]

cpe:2.3:a:cisco:iot_field_network_director:*:*:*:*:*:*:*:*

No data.

Vendor Product Versions

Cisco

Iot Field Network Director

Version	Status	Scheme	Platform
`4.5.1`	affected	semver	—
`4.4.3`	affected	semver	—
`4.1.0`	affected	semver	—
`4.1.3`	affected	semver	—
`4.6.1`	affected	semver	—
`4.1.1`	affected	semver	—
`4.4.0`	affected	semver	—
`4.2.0`	affected	semver	—
`4.4.2`	affected	semver	—
`4.3.0`	affected	semver	—
`4.6.0`	affected	semver	—
`4.4.4`	affected	semver	—
`4.3.2`	affected	semver	—
`4.1.2`	affected	semver	—
`4.4.1`	affected	semver	—
`4.5.0`	affected	semver	—
`4.3.1`	affected	semver	—
`4.7.0`	affected	semver	—
`4.6.2`	affected	semver	—
`4.7.1`	affected	semver	—
`4.7.2`	affected	semver	—
`4.8.0`	affected	semver	—
`4.8.1`	affected	semver	—
`4.9.0`	affected	semver	—
`4.9.1`	affected	semver	—
`4.10.0`	affected	semver	—
`4.9.2`	affected	semver	—
`4.11.0`	affected	semver	—
`4.12.0`	affected	semver	—
`4.12.1`	affected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply the latest Cisco IoT Field Network Director patch or upgrade to the latest version implementing proper file access checks.
Restrict the accounts that can log into the web-based management interface, enforcing least privilege so that low-privilege users cannot read protected files.
Enable logging and alerting for unauthorized file access attempts to detect exploitation.

Generated by OpenCVE AI on May 6, 2026 at 18:21 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.272% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iot-fnd-dos-n8N26Q4u

History

May 7, 2026 6:30 PM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Cisco Cisco iot Field Network Director
Vendors & Products		Cisco Cisco iot Field Network Director

May 6, 2026 6:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

May 6, 2026 4:45 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to retrieve files that they do not have permission to access. This vulnerability is due to insufficient file access checks. An attacker could exploit this vulnerability by submitting crafted input in the web-based management interface. A successful exploit could allow the attacker to read files that they are not authorized to access.
Title		Cisco IoT Field Network Director Path Traversal Vulnerability
Weaknesses		CWE-388
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iot-fnd-dos-n8N26Q4u
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}`