CVE-2026-20124

Vulnerability overview

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to improper error handling when parsing SNMP requests. This vulnerability affects all versions of SNMP — Versions 1, 2c, and 3. An attacker could exploit this vulnerability by sending a malformed SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly. The atta...

Affected product and versions

Product

Cisco Cisco IOS XE Software

Affected versions

>= 17.2.1a, >= 3.18.7SP, >= 16.12.1y, >= 16.12.3s, >= 16.7.1b, >= 16.6.2, >= 16.6.5, >= 16.12.1w, >= 3.18.4S, >= 16.9.1d, >= 17.3.1, >= 16.9.4c, >= 16.7.1, >= 17.2.1, >= 16.6.8, >= 16.9.1b, >= 3.16.8S, >= 16.9.2s, >= 16.12.4, >= 16.12.3a

Fixed versions

No verified fixed-version field is available yet

Technical data

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE

CWE-772