İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Yüksek CVSS 8.6

CVE-2026-20263: Ios Xe: güvenlik açığı

Yayın: · Güncelleme:

Açıklama (NVD)

A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling when parsing a specific BEEP SOAP request. An attacker could exploit this vulnerability by sending a specific BEEP SOAP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.

Özet bilgiler

Ürün
Cisco Ios Xe
CVSS v3.1
8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
EPSS
%0,57 (yüzdelik 48)
CWE
CWE-388
Yama
Yok / bilinmiyor

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
cisco-ios-xe16.6.216.6.2—
cisco-ios-xe16.6.316.6.3—
cisco-ios-xe16.6.416.6.4—
cisco-ios-xe16.6.4a16.6.4a—
cisco-ios-xe16.6.4s16.6.4s—
cisco-ios-xe16.6.516.6.5—
cisco-ios-xe16.6.5a16.6.5a—
cisco-ios-xe16.6.5b16.6.5b—
cisco-ios-xe16.6.616.6.6—
cisco-ios-xe16.6.716.6.7—
cisco-ios-xe16.6.7a16.6.7a—
cisco-ios-xe16.6.816.6.8—
cisco-ios-xe16.6.916.6.9—
cisco-ios-xe16.6.1016.6.10—
cisco-ios-xe16.7.116.7.1—
cisco-ios-xe16.7.1a16.7.1a—
cisco-ios-xe16.7.1b16.7.1b—
cisco-ios-xe16.7.216.7.2—
cisco-ios-xe16.7.316.7.3—
cisco-ios-xe16.7.416.7.4—
cisco-ios-xe16.8.116.8.1—
cisco-ios-xe16.8.1a16.8.1a—
cisco-ios-xe16.8.1b16.8.1b—
cisco-ios-xe16.8.1c16.8.1c—
cisco-ios-xe16.8.1d16.8.1d—
cisco-ios-xe16.8.1e16.8.1e—
cisco-ios-xe16.8.1s16.8.1s—
cisco-ios-xe16.8.216.8.2—
cisco-ios-xe16.8.316.8.3—
cisco-ios-xe16.9.116.9.1—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları