CVEvulnerability

CVE-2026-20124

7.7 HIGH Published 2026-08-05 Modified 2026-10-23 Official page ↗
Status
Analyzed
Published
2026-08-05
Last modified
2026-10-23
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.7 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Weaknesses
CWE-772

Description

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to improper error handling when parsing SNMP requests. This vulnerability affects all versions of SNMP — Versions 1, 2c, and 3. An attacker could exploit this vulnerability by sending a malformed SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly. The attacker must have the SNMPv1 or v2c read-only or read-write community string or valid SNMPv3 user credentials on the affected device.

Affected configurations

• cisco ios xe 3.13.9s • cisco ios xe 3.13.10s • cisco ios xe 3.16.6bs • cisco ios xe 3.16.7as • cisco ios xe 3.16.7bs • cisco ios xe 3.16.7s • cisco ios xe 3.16.8s • cisco ios xe 3.16.9s • cisco ios xe 3.16.10as • cisco ios xe 3.16.10bs • cisco ios xe 3.16.10s • cisco ios xe 3.18.3asp • cisco ios xe 3.18.3bsp • cisco ios xe 3.18.3sp • cisco ios xe 3.18.4s • cisco ios xe 3.18.4sp • cisco ios xe 3.18.5sp • cisco ios xe 3.18.6sp • cisco ios xe 3.18.7sp • cisco ios xe 3.18.8asp • cisco ios xe 3.18.9sp • cisco ios xe 16.6.2 • cisco ios xe 16.6.3 • cisco ios xe 16.6.4 • cisco ios xe 16.6.4a • cisco ios xe 16.6.4s • cisco ios xe 16.6.5 • cisco ios xe 16.6.5a • cisco ios xe 16.6.5b • cisco ios xe 16.6.6 • cisco ios xe 16.6.7 • cisco ios xe 16.6.7a • cisco ios xe 16.6.8 • cisco ios xe 16.6.9 • cisco ios xe 16.6.10 • cisco ios xe 16.7.1 • cisco ios xe 16.7.1a • cisco ios xe 16.7.1b • cisco ios xe 16.7.2 • cisco ios xe 16.7.3 • cisco ios xe 16.7.4 • cisco ios xe 16.8.1 • cisco ios xe 16.8.1a • cisco ios xe 16.8.1b • cisco ios xe 16.8.1c • cisco ios xe 16.8.1d • cisco ios xe 16.8.1e • cisco ios xe 16.8.1s • cisco ios xe 16.8.2 • cisco ios xe 16.8.3 • cisco ios xe 16.9.1 • cisco ios xe 16.9.1a • cisco ios xe 16.9.1b • cisco ios xe 16.9.1c • cisco ios xe 16.9.1d • cisco ios xe 16.9.1s • cisco ios xe 16.9.2 • cisco ios xe 16.9.2a • cisco ios xe 16.9.2s • cisco ios xe 16.9.3 … and 217 more

Related

Weakness · CWE (1)

  • CWE-772 Missing Release of Resource after Effective Lifetime weakness

References