CVE-2026-20311

Katalog CVE

CVSS 6.3 · Medium EPSS 0,25%

Kerentanan Buffer Over-read. Skor CVSS 3.1 6.3 (Medium) menurut cisco.com.

Deskripsi (NVD)

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient error handling in the web-based management interface. An attacker could exploit this vulnerability by authenticating with a malformed certificate. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

Rincian

Terbit di NVD

5 Agustus 2026

Terakhir diubah

6 Agustus 2026

Status NVD

Awaiting Analysis

CVSS 3.1

6.3 (Medium), sumber cisco.com
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-126: Buffer Over-read

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 15,5% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xe-webui-dos-PtAODAWW