CVE-2026-20167
HighCVSS 7.7Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to cause a DoS condition on a remotely managed router. This is due to improper error handling. An attacker could exploit this by submitting crafted input, causing the router to reload and resulting in a DoS.
Risk Assessment
The risk involves potential disruption of remotely managed routers, which could impact IoT network operations and the availability of critical services for the organization.
Recommendation
It is recommended to immediately apply patches provided by Cisco for Cisco IoT Field Network Director and restrict access to the management interface to trusted users only.
Other vulnerabilities in Cisco IoT Field Network Director
See all- CVE-2026-20169Medium
A vulnerability in the web-based management interface of Cisco IoT Field Network Director allows an authenticated, remote attacker with low privileges to access files and execute commands on a remote router. This is due to insufficient input validation of user-supplied data.
- CVE-2026-20168Medium
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to retrieve files that they do not have permission to access. This is due to insufficient file access checks.
Original NVD description (English source)
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to cause a DoS condition on a remotely managed router. This vulnerability is due to improper error handling. An attacker could exploit this vulnerability by submitting crafted input to the web-based management interface. A successful exploit could allow the attacker to request unauthorized files from a remote router, causing the router to reload and resulting in a DoS condition.