Known vulnerabilities in Cisco IoT Field Network Director

Vendor: Cisco Systems, Inc
Software: Cisco IoT Field Network Director
Software CPE: cpe:2.3:a:cisco_systems:cisco_iot_field_network_director:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco IoT Field Network Director Cisco IoT Field Network Director is affected by 17 known vulnerabilities: 1 high, 8 medium, 8 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130286 - Command injection
CVE-2026-20169		 CWE-77 Medium
No
No
 5.0.0-117 07.05.2026 SB2026050714
#VU130285 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-20168		 CWE-22 Medium
No
No
 5.0.0-117 07.05.2026 SB2026050714
#VU130284 - Error Handling
CVE-2026-20167		 CWE-388 Medium
No
No
 5.0.0-117 07.05.2026 SB2026050714
#VU48546 - Missing Authentication for Critical Function
CVE-2020-3531		 CWE-306 High
No
No
 4.6.1 18.11.2020 SB2020111902
#VU48544 - Improper Access Control
CVE-2020-26080		 CWE-284 Low
No
No
 4.6.1 18.11.2020 SB2020111902
#VU48545 - Missing Authentication for Critical Function
CVE-2020-3392		 CWE-306 Medium
No
No
 4.6.1 18.11.2020 SB2020111902
#VU48547 - Improper Access Control
CVE-2020-26072		 CWE-284 Low
No
No
 4.6.1 18.11.2020 SB2020111902
#VU48548 - Improper Access Control
CVE-2020-26077		 CWE-284 Medium
No
No
 4.6.1 18.11.2020 SB2020111902
#VU48549 - External Control of File Name or Path
CVE-2020-26078		 CWE-73 Low
No
No
 4.6.1 18.11.2020 SB2020111902
#VU48550 - Unprotected Storage of Credentials
CVE-2020-26079		 CWE-256 Low
No
No
 4.6.1 18.11.2020 SB2020111902
#VU48551 - Exposure of sensitive information to an unauthorized actor
CVE-2020-26076		 CWE-200 Medium
No
No
 4.6.1 18.11.2020 SB2020111902
#VU48552 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26081		 CWE-79 Low
No
No
 4.6.1 18.11.2020 SB2020111902
#VU48564 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-26075		 CWE-89 Medium
No
No
 4.6.1 18.11.2020 SB2020111902
#VU26980 - Improper input validation
CVE-2020-3162		 CWE-20 Medium
No
No
 4.6 16.04.2020 SB2020041610
#VU17843 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-1698		 CWE-611 Low
No
No
 4.4.0.26 22.02.2019 SB2019022209
#VU17197 - Resource exhaustion
CVE-2019-1644		 CWE-400 Low
No
No
 4.1.2 19, 4.3.0 133 23.01.2019 SB2019012412
#VU8159 - Resource exhaustion
CVE-2017-6780		 CWE-400 Low
No
No
 - 07.09.2017 SB2017090717