Denial of Service Vulnerability in Cisco IOS XE Software's Secure Copy Protocol
CVE-2026-20083

6.5MEDIUM

Key Information:

Vendor

Cisco
Status
Cisco iOS Xe Software
Vendor
CVE Published:
25 March 2026

Badges

👾 Exploit Exists

What is CVE-2026-20083?

A vulnerability exists in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software that allows an authenticated local attacker to disrupt service. This issue stems from the improper processing of malformed SCP requests. An attacker with low privileges can exploit this by sending a specially crafted command through SSH. If successfully executed, this can lead to an unexpected reload of the affected device, resulting in a denial of service condition.

Affected Version(s)

Cisco IOS XE Software 3.5.0E

Cisco IOS XE Software 3.5.1E

Cisco IOS XE Software 3.5.2E

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.