Cisco Iot Field Network Director — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Iot Field Network Director, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (20)

• CVE-2020-3531 — CVSS 9.8 (critical): A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to access the…
• CVE-2020-26075 — CVSS 8.8 (high): A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to gain access to…
• CVE-2018-0270 — CVSS 8.8 (high): A vulnerability in the web-based management interface of Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote…
• CVE-2020-26072 — CVSS 8.7 (high): A vulnerability in the SOAP API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to access and…
• CVE-2026-20167 — CVSS 7.7 (high): A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker…
• CVE-2020-3162 — CVSS 7.5 (high): A vulnerability in the Constrained Application Protocol (CoAP) implementation of Cisco IoT Field Network Director could allow an…
• CVE-2019-1644 — CVSS 7.5 (high): A vulnerability in the UDP protocol implementation for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote…
• CVE-2017-6780 — CVSS 7.5 (high): A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote…
• CVE-2019-1957 — CVSS 7.5 (high): A vulnerability in the web interface of Cisco IoT Field Network Director could allow an unauthenticated, remote attacker to trigger high…
• CVE-2020-26076 — CVSS 7.5 (high): A vulnerability in Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to view sensitive database…
• CVE-2023-44487 — CVSS 7.5 (high) — actively exploited: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly…
• CVE-2020-3392 — CVSS 7.5 (high): A vulnerability in the API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to view sensitive…
• CVE-2020-26078 — CVSS 6.5 (medium): A vulnerability in the file system of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to overwrite…
• CVE-2026-20168 — CVSS 6.5 (medium): A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker…
• CVE-2026-20169 — CVSS 6.4 (medium): A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker…
• CVE-2020-26081 — CVSS 6.1 (medium): Multiple vulnerabilities in the web UI of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to conduct…
• CVE-2020-26079 — CVSS 4.9 (medium): A vulnerability in the web UI of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to obtain hashes of…
• CVE-2019-1698 — CVSS 4.9 (medium): A vulnerability in the web-based user interface of Cisco Internet of Things Field Network Director (IoT-FND) Software could allow an…
• CVE-2020-26077 — CVSS 4.3 (medium): A vulnerability in the access control functionality of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker…
• CVE-2020-26080 — CVSS 4.1 (medium): A vulnerability in the user management functionality of Cisco IoT Field Network Director (FND) could allow an authenticated, remote…