CVE-2026-20124: Cisco IOS XE Software SNMP Denial of Service Vulnerability

2 karet z 2 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2026-20124

EPSS 0.01 EPSS k 3. 11. 2026

Hodnocení závažnosti

7.7 CVSS 3.1 cisco

útok odkudkoli z internetu bez přípravy stačí běžný účet bez zásahu uživatele
dopad bez úniku dat beze změny dat úplný výpadek
přesah dopad i mimo zranitelnou součást

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost

Cisco Advance Notification for Publication of August 5, 2026, Security Advisories

On August 5, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026 CVE-2026-20303CVE-2026-20304CVE-2026-20310CVE-2026-20312CVE-2026-20313 Critical 9.9 Cisco IOS XE Software Security Hardening Release: August 2026 CVE-2026-20267CVE-2026-20268CVE-2026-20269CVE-2026-20270CVE-2026-20271CVE-2026-20272CVE-2026-20273…

EPSS 0.01 CVE-2026-20028 CVE-2026-20124 CVE-2026-20198 CVE-2026-20263 CVE-2026-20289 CVE-2026-20294 CVE-2026-20301 CVE-2026-20311 Cisco US

· Cisco PSIRT · Cisco Advance Notification for Publication of August 5, 2026, Security Advisories

Cisco IOS XE Software SNMP Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to improper error handling when parsing SNMP requests. This vulnerability affects all versions of SNMP — Versions 1, 2c, and 3. An attacker could exploit this vulnerability by sending a malformed SNMP request to an affected device. A…

EPSS 0.01 CVE-2026-20124 Cisco US

· Cisco PSIRT · Cisco IOS XE Software SNMP Denial of Service Vulnerability