← CVE Intelligence

CVE-2026-20124

Cisco IOS XE Software SNMP Denial of Service Vulnerability PUBLISHED

Description (CNA)

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to improper error handling when parsing SNMP requests. This vulnerability affects all versions of SNMP — Versions 1, 2c, and 3. An attacker could exploit this vulnerability by sending a malformed SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly. The attacker must have the SNMPv1 or v2c read-only or read-write community string or valid SNMPv3 user credentials on the affected device.

Affected (CNA)

Vendor / productVersions
Cisco / Cisco IOS XE Softwareaffected 17.2.1a; affected 3.18.7SP; affected 16.12.1y; affected 16.12.3s; affected 16.7.1b; affected 16.6.2; affected 16.6.5; affected 16.12.1w; affected 3.18.4S; affected 16.9.1d; affected 17.3.1; affected 16.9.4c; affected 16.7.1; affected 17.2.1; affected 16.6.8; affected 16.9.1b; affected 3.16.8S; affected 16.9.2s; affected 16.12.4; affected 16.12.3a; affected 17.1.1s; affected 16.11.1a; affected 16.7.2; affected 16.11.1b; affected 16.9.1s; affected 16.9.3h; affected 16.9.1c; affected 16.6.5a; affected 16.6.3; affected 16.10.1f; affected 17.2.1v; affected 16.8.1e; affected 16.9.3a; affected 16.12.1a; affected 16.12.1x; affected 3.16.10aS; affected 16.6.4s; affected 16.10.1c; affected 16.12.3; affected 16.11.2; affected 16.6.5b; affected 16.12.2s; affected 16.10.1b; affected 16.7.3; affected 16.6.7; affected 16.9.6; affected 16.9.2; affected 3.16.10S; affected 16.10.1; affected 16.12.1t; affected 3.18.3bSP; affected 3.13.9S; affected 3.18.3aSP; affected 3.18.5SP; affected 16.9.1; affected 16.8.1a; affected 3.18.8aSP; affected 16.9.3s; affected 16.6.7a; affected 16.12.2; affected 16.11.1; affected 16.9.3; affected 16.11.1s; affected 16.12.1; affected 3.16.9S; affected 17.1.1; affected 17.1.2; affected 16.10.1d; affected 17.1.1t; affected 16.9.4; affected 16.8.3; affected 16.12.2t; affected 16.9.5; affected 3.16.7S; affected 16.8.1s; affected 16.10.1e; affected 16.8.2; affected 16.6.4; affected 16.8.1b; affected 16.10.1a; affected 16.12.1z; affected 16.8.1c; affected 16.9.1a; affected 3.16.7aS; affected 16.9.5f; affected 16.6.4a; affected 16.10.1g; affected 3.13.10S; affected 16.8.1; affected 16.6.6; affected 16.9.2a; affected 16.8.1d; affected 16.10.3; affected 3.18.4SP; affected 3.18.6SP; affected 3.18.3SP; affected 16.7.1a; affected 16.11.1c; affected 16.10.1s; affected 17.2.1r; affected 3.16.7bS; affected 17.1.1a; affected 16.10.2; affected 16.12.2a; affected 3.16.6bS; affected 16.12.1c; affected 16.12.1s; affected 16.7.4; affected 3.18.9SP; affected 17.2.2; affected 16.9.8; affected 16.9.7; affected 17.1.3; affected 17.3.1a; affected 17.3.2a; affected 16.12.5; affected 17.3.1w; affected 17.3.2; affected 17.4.1; affected 16.12.4a; affected 17.4.1a; affected 3.16.10bS; affected 17.3.1x; affected 17.3.3; affected 16.6.9; affected 17.2.3; affected 17.5.1; affected 16.12.1z1; affected 16.12.5a; affected 17.4.1b; affected 17.3.1z; affected 16.12.5b; affected 17.4.2; affected 17.3.3a; affected 17.3.5; affected 17.3.4; affected 17.5.1a; affected 16.12.6; affected 17.6.1; affected 16.12.1z2; affected 16.6.10; affected 17.3.4a; affected 17.6.1a; affected 17.7.1; affected 17.6.1x; affected 17.6.2; affected 16.12.6a; affected 17.3.4c; affected 17.4.2a; affected 17.3.4b; affected 17.7.1a; affected 16.12.7; affected 17.8.1a; affected 17.6.3a; affected 17.6.3; affected 17.7.2; affected 17.7.1b; affected 17.9.1w; affected 17.3.5a; affected 17.6.1z; affected 16.12.8; affected 17.8.1; affected 17.9.1; affected 17.6.4; affected 17.3.5b; affected 17.9.1a; affected 17.3.6; affected 17.10.1; affected 16.9.8a; affected 17.6.1z1; affected 17.10.1a; affected 17.9.2; affected 17.6.5; affected 17.9.1x; affected 17.9.1y; affected 16.9.8b; affected 17.3.7; affected 17.9.2a; affected 17.9.3; affected 16.12.9; affected 17.11.1; affected 17.10.1b; affected 17.6.6; affected 17.9.1x1; affected 17.11.1a; affected 17.9.3a; affected 17.12.1; affected 17.3.8; affected 17.9.4; affected 16.12.10; affected 17.12.1w; affected 17.9.1y1; affected 17.12.1a; affected 17.9.5; affected 17.13.1; affected 17.12.1x; affected 17.12.2; affected 17.14.1; affected 17.9.4a; affected 17.3.8a; affected 17.6.6a; affected 17.6.5a; affected 17.6.7; affected 16.12.10a; affected 17.15.1; affected 17.13.1a; affected 17.12.2a; affected 16.12.11; affected 17.12.3; affected 17.12.1y; affected 17.12.1z; affected 17.9.5a; affected 17.14.1a; affected 17.9.5b; affected 17.6.8; affected 16.12.12; affected 17.12.4; affected 17.9.6; affected 17.17.1; affected 17.16.1; affected 17.15.1w; affected 17.12.3a; affected 17.9.5c; affected 17.15.1a; affected 17.12.1z1; affected 17.15.2; affected 17.15.1b; affected 17.9.5d; affected 17.15.1x; affected 17.9.6a; affected 17.12.1z2; affected 17.6.8a; affected 17.16.1a; affected 16.12.13; affected 17.15.3; affected 17.9.7; affected 17.12.5; affected 17.15.1y; affected 17.9.5e; affected 17.12.4a; affected 17.15.2a; affected 17.15.2c; affected 17.15.2b; affected 17.12.1z3; affected 17.9.5f; affected 17.12.4b; affected 17.12.5a; affected 17.18.1; affected 17.12.6; affected 17.12.1z4; affected 17.9.8; affected 17.9.7a; affected 17.15.3a; affected 17.15.4; affected 17.12.5b; affected 17.15.3b; affected 16.12.14; affected 17.9.7b; affected 17.12.5c; affected 17.18.1a; affected 17.15.4a; affected 17.18.2; affected 17.18.1w; affected 17.15.4b; affected 17.12.6a; affected 17.15.4c; affected 17.9.9; affected 17.12.5d; affected 16.12.15; affected 17.15.4s1; affected 17.12.1z5; affected 17.18.1x; affected 17.12.1z6; affected 17.15.4d; affected 17.12.6b; affected 17.4.1c; affected 17.18.1y

CWE

CWE-772

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.