Denial of Service Vulnerability in Cisco Industrial Ethernet 1000 Series Switches

CVE-2026-20177

What is CVE-2026-20177?

A vulnerability affecting Cisco Industrial Ethernet 1000 Series Switches allows an unauthenticated remote attacker to exploit the device's management plane by sending high rates of ICMP, SSH, or HTTP traffic. This could lead to a denial of service condition, rendering the device manager, SSH, or API inaccessible. The device's traffic functionality remains unaffected, but the unavailability of management interfaces can impact administrative control and monitoring capabilities. Proper security measures should be implemented to protect against flooding attacks.

References