CVE-2026-20124
HIGH
MEDIUM
Priority: 0.04
BB Relevance:
66/100
Published: 2026-08-05
Modified: 2026-10-23
First seen: 2026-10-29
Status: active
Attack Surface
Network
Low Complexity
No Interaction
Scope Change
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
Low
UI:
None
S:
Changed
C:
None
I:
None
A:
High
Description
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to improper error handling when parsing SNMP requests. This vulnerability affects all versions of SNMP — Versions 1, 2c, and 3. An attacker could exploit this vulnerability by sending a malformed SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly. The attacker must have the SNMPv1 or v2c read-only or read-write community string or valid SNMPv3 user credentials on the affected device.
Weakness Classification (1)
Affected Software (277)
| Vendor | Product | Version |
|---|---|---|
| cisco | ios_xe | 3.13.9s |
| cisco | ios_xe | 3.13.10s |
| cisco | ios_xe | 3.16.6bs |
| cisco | ios_xe | 3.16.7as |
| cisco | ios_xe | 3.16.7bs |
| cisco | ios_xe | 3.16.7s |
| cisco | ios_xe | 3.16.8s |
| cisco | ios_xe | 3.16.9s |
| cisco | ios_xe | 3.16.10as |
| cisco | ios_xe | 3.16.10bs |
| cisco | ios_xe | 3.16.10s |
| cisco | ios_xe | 3.18.3asp |
| cisco | ios_xe | 3.18.3bsp |
| cisco | ios_xe | 3.18.3sp |
| cisco | ios_xe | 3.18.4s |
| cisco | ios_xe | 3.18.4sp |
| cisco | ios_xe | 3.18.5sp |
| cisco | ios_xe | 3.18.6sp |
| cisco | ios_xe | 3.18.7sp |
| cisco | ios_xe | 3.18.8asp |
| cisco | ios_xe | 3.18.9sp |
| cisco | ios_xe | 16.6.2 |
| cisco | ios_xe | 16.6.3 |
| cisco | ios_xe | 16.6.4 |
| cisco | ios_xe | 16.6.4a |
| cisco | ios_xe | 16.6.4s |
| cisco | ios_xe | 16.6.5 |
| cisco | ios_xe | 16.6.5a |
| cisco | ios_xe | 16.6.5b |
| cisco | ios_xe | 16.6.6 |
Showing 30 of 277 entries
References & Advisories (1)
Mitigation
Vendor Advisory