Cisco IoT Field Network Director vulnerabilities

20 CVEs affecting Cisco IoT Field Network Director, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-20169, published 2026-05-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-44487: HTTP/2 Rapid Reset Attack Vulnerability, published 2023-10-10. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2023-10-10. EPSS: 100% chance of exploitation in the next 30 days. The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2019-1698, published 2019-02-21. Medium severity, CVSS 4.9. EPSS: 3.1% chance of exploitation in the next 30 days. A vulnerability in the web-based user interface of Cisco Internet of Things Field Network Director (IoT-FND) Software could allow an authenticated, remote attacker to gain read access to information…
CVE-2019-1644, published 2019-01-23. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. A vulnerability in the UDP protocol implementation for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to exhaust system resources, resulting in a denial of…
CVE-2020-3531, published 2020-11-18. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to access the back-end database of an affected system. The vulnerability…
CVE-2019-1957, published 2019-08-08. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability in the web interface of Cisco IoT Field Network Director could allow an unauthenticated, remote attacker to trigger high CPU usage, resulting in a denial of service (DoS) condition on…
CVE-2017-6780, published 2017-09-07. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to cause the system to consume additional memory,…
CVE-2020-3162, published 2020-04-15. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability in the Constrained Application Protocol (CoAP) implementation of Cisco IoT Field Network Director could allow an unauthenticated remote attacker to cause a denial of service (DoS)…
CVE-2020-26075, published 2020-11-18. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to gain access to the back-end database of an affected device. The…
CVE-2020-3392, published 2020-11-18. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability in the API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to view sensitive information on an affected system. The vulnerability exists…
CVE-2020-26078, published 2020-11-18. Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability in the file system of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to overwrite files on an affected system. The vulnerability is due to…

Latest

CVE-2026-20169, published 2026-05-06. Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to access files and execute commands on a…
CVE-2026-20168, published 2026-05-06. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to retrieve files that they do not have…
CVE-2026-20167, published 2026-05-06. High severity, CVSS 7.7. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to cause a DoS condition on a remotely…
CVE-2020-26081, published 2020-11-18. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web UI of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against users on an…
CVE-2020-26080, published 2020-11-18. Medium severity, CVSS 4.1. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the user management functionality of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to manage user information for users in different domains…
CVE-2020-26079, published 2020-11-18. Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the web UI of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to obtain hashes of user passwords on an affected device. The vulnerability is…