CVE-2026-20167

설명

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to cause a DoS condition on a remotely managed router. This vulnerability is due to improper error handling. An attacker could exploit this vulnerability by submitting crafted input to the web-based management interface. A successful exploit could allow the attacker to request unauthorized files from a remote router, causing the router to reload and resulting in a DoS condition.

영향 제품·버전

제품 Cisco IoT Field Network Director (IoT-FND), iot field network director

영향 버전 Cisco IoT Field Network Director (IoT-FND), iot field network director 4.5.1, 4.4.3, 4.1.0, 4.1.3, 4.6.1, 4.1.1, 4.4.0, 4.2.0, 4.4.2, 4.3.0, 4.6.0, 4.4.4, 4.3.2, 4.1.2, 4.4.1, 4.5.0, 4.3.1, 4.7.0, 4.6.2, 4.7.1

수정 버전 Cisco IoT Field Network Director (IoT-FND), iot field network director 5.0.0-117

기술 정보

CVSS 벡터 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE CWE-284

EPSS 데이터 기준일 2026.08.03