Yüksek CVSS 7.7
CVE-2026-20124: Ios Xe: güvenlik açığı
Açıklama (NVD)
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to improper error handling when parsing SNMP requests. This vulnerability affects all versions of SNMP — Versions 1, 2c, and 3. An attacker could exploit this vulnerability by sending a malformed SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly. The attacker must have the SNMPv1 or v2c read-only or read-write community string or valid SNMPv3 user credentials on the affected device.
Özet bilgiler
- Ürün
- Cisco Ios Xe
- CVSS v3.1
- 7.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - EPSS
- %0,50 (yüzdelik 43)
- CWE
- CWE-772
- Yama
- Geçici çözüm
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| cisco-ios-xe | 3.13.9s | 3.13.9s | — |
| cisco-ios-xe | 3.13.10s | 3.13.10s | — |
| cisco-ios-xe | 3.16.6bs | 3.16.6bs | — |
| cisco-ios-xe | 3.16.7as | 3.16.7as | — |
| cisco-ios-xe | 3.16.7bs | 3.16.7bs | — |
| cisco-ios-xe | 3.16.7s | 3.16.7s | — |
| cisco-ios-xe | 3.16.8s | 3.16.8s | — |
| cisco-ios-xe | 3.16.9s | 3.16.9s | — |
| cisco-ios-xe | 3.16.10as | 3.16.10as | — |
| cisco-ios-xe | 3.16.10bs | 3.16.10bs | — |
| cisco-ios-xe | 3.16.10s | 3.16.10s | — |
| cisco-ios-xe | 3.18.3asp | 3.18.3asp | — |
| cisco-ios-xe | 3.18.3bsp | 3.18.3bsp | — |
| cisco-ios-xe | 3.18.3sp | 3.18.3sp | — |
| cisco-ios-xe | 3.18.4s | 3.18.4s | — |
| cisco-ios-xe | 3.18.4sp | 3.18.4sp | — |
| cisco-ios-xe | 3.18.5sp | 3.18.5sp | — |
| cisco-ios-xe | 3.18.6sp | 3.18.6sp | — |
| cisco-ios-xe | 3.18.7sp | 3.18.7sp | — |
| cisco-ios-xe | 3.18.8asp | 3.18.8asp | — |
| cisco-ios-xe | 3.18.9sp | 3.18.9sp | — |
| cisco-ios-xe | 16.6.2 | 16.6.2 | — |
| cisco-ios-xe | 16.6.3 | 16.6.3 | — |
| cisco-ios-xe | 16.6.4 | 16.6.4 | — |
| cisco-ios-xe | 16.6.4a | 16.6.4a | — |
| cisco-ios-xe | 16.6.4s | 16.6.4s | — |
| cisco-ios-xe | 16.6.5 | 16.6.5 | — |
| cisco-ios-xe | 16.6.5a | 16.6.5a | — |
| cisco-ios-xe | 16.6.5b | 16.6.5b | — |
| cisco-ios-xe | 16.6.6 | 16.6.6 | — |