6.3

CVE-2026-20311

Cisco IOS XE Software Web UI Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to insufficient error handling in the web-based management interface. An attacker could exploit this vulnerability by authenticating with a malformed certificate. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerCisco
≫
Produkt Cisco IOS XE Software
Default Statusunknown
Version 17.3.1
Status affected
Version 17.3.1a
Status affected
Version 17.3.2a
Status affected
Version 17.3.1w
Status affected
Version 17.3.2
Status affected
Version 17.4.1
Status affected
Version 17.4.1a
Status affected
Version 17.3.1x
Status affected
Version 17.3.3
Status affected
Version 17.5.1
Status affected
Version 17.4.1b
Status affected
Version 17.3.1z
Status affected
Version 17.4.2
Status affected
Version 17.3.3a
Status affected
Version 17.3.5
Status affected
Version 17.3.4
Status affected
Version 17.5.1a
Status affected
Version 17.6.1
Status affected
Version 17.3.4a
Status affected
Version 17.6.1a
Status affected
Version 17.7.1
Status affected
Version 17.6.1x
Status affected
Version 17.6.2
Status affected
Version 17.3.4c
Status affected
Version 17.4.2a
Status affected
Version 17.3.4b
Status affected
Version 17.7.1a
Status affected
Version 17.8.1a
Status affected
Version 17.6.3a
Status affected
Version 17.6.3
Status affected
Version 17.7.2
Status affected
Version 17.7.1b
Status affected
Version 17.9.1w
Status affected
Version 17.3.5a
Status affected
Version 17.6.1z
Status affected
Version 17.8.1
Status affected
Version 17.9.1
Status affected
Version 17.6.4
Status affected
Version 17.3.5b
Status affected
Version 17.9.1a
Status affected
Version 17.3.6
Status affected
Version 17.10.1
Status affected
Version 17.6.1z1
Status affected
Version 17.10.1a
Status affected
Version 17.9.2
Status affected
Version 17.6.5
Status affected
Version 17.9.1x
Status affected
Version 17.9.1y
Status affected
Version 17.3.7
Status affected
Version 17.9.2a
Status affected
Version 17.9.3
Status affected
Version 17.11.1
Status affected
Version 17.10.1b
Status affected
Version 17.6.6
Status affected
Version 17.9.1x1
Status affected
Version 17.11.1a
Status affected
Version 17.9.3a
Status affected
Version 17.12.1
Status affected
Version 17.3.8
Status affected
Version 17.9.4
Status affected
Version 17.12.1w
Status affected
Version 17.9.1y1
Status affected
Version 17.12.1a
Status affected
Version 17.9.5
Status affected
Version 17.13.1
Status affected
Version 17.12.1x
Status affected
Version 17.12.2
Status affected
Version 17.14.1
Status affected
Version 17.9.4a
Status affected
Version 17.3.8a
Status affected
Version 17.6.6a
Status affected
Version 17.6.5a
Status affected
Version 17.6.7
Status affected
Version 17.15.1
Status affected
Version 17.13.1a
Status affected
Version 17.12.2a
Status affected
Version 17.12.3
Status affected
Version 17.12.1y
Status affected
Version 17.12.1z
Status affected
Version 17.9.5a
Status affected
Version 17.14.1a
Status affected
Version 17.9.5b
Status affected
Version 17.6.8
Status affected
Version 17.12.4
Status affected
Version 17.9.6
Status affected
Version 17.17.1
Status affected
Version 17.16.1
Status affected
Version 17.15.1w
Status affected
Version 17.12.3a
Status affected
Version 17.9.5c
Status affected
Version 17.15.1a
Status affected
Version 17.12.1z1
Status affected
Version 17.15.2
Status affected
Version 17.15.1b
Status affected
Version 17.9.5d
Status affected
Version 17.15.1x
Status affected
Version 17.9.6a
Status affected
Version 17.12.1z2
Status affected
Version 17.6.8a
Status affected
Version 17.16.1a
Status affected
Version 17.15.3
Status affected
Version 17.9.7
Status affected
Version 17.12.5
Status affected
Version 17.15.1y
Status affected
Version 17.9.5e
Status affected
Version 17.12.4a
Status affected
Version 17.15.2a
Status affected
Version 17.15.2c
Status affected
Version 17.15.2b
Status affected
Version 17.12.1z3
Status affected
Version 17.9.5f
Status affected
Version 17.12.4b
Status affected
Version 17.12.5a
Status affected
Version 17.18.1
Status affected
Version 17.12.6
Status affected
Version 17.12.1z4
Status affected
Version 17.9.8
Status affected
Version 17.9.7a
Status affected
Version 17.15.3a
Status affected
Version 17.15.4
Status affected
Version 17.12.5b
Status affected
Version 17.15.3b
Status affected
Version 17.18.1z
Status affected
Version 17.9.7b
Status affected
Version 17.12.5c
Status affected
Version 26.1.1
Status affected
Version 17.18.1a
Status affected
Version 17.15.4a
Status affected
Version 17.18.2
Status affected
Version 17.18.1w
Status affected
Version 17.15.4b
Status affected
Version 17.12.6a
Status affected
Version 17.12.7
Status affected
Version 17.15.4c
Status affected
Version 17.9.9
Status affected
Version 17.12.5d
Status affected
Version 17.15.4s1
Status affected
Version 17.15.5
Status affected
Version 17.12.1z5
Status affected
Version 17.18.1x
Status affected
Version 17.12.1z6
Status affected
Version 17.15.4d
Status affected
Version 17.12.6b
Status affected
Version 17.4.1c
Status affected
Version 17.15.5a
Status affected
Version 17.18.1y
Status affected
Version 17.12.7a
Status affected
Version 17.18.3
Status affected
Version 17.12.7b
Status affected
Version 17.18.3a
Status affected
Version 26.1.1a
Status affected
Version 26.2.1ea
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.054
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Cisco PSIRT 6.3 1.8 4
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
CWE-126 Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xe-webui-dos-PtAODAWW