CVE-2026-20083

A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of a malformed SCP request. An attacker could exploit this vulnerability by issuing a crafted command through SSH. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.0 / Impact : 4.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-scp-dos-duAdXtCg

Configurations

No configuration.

History

17 Jun 2026, 10:17

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad en la característica de servidor del Secure Copy Protocol (SCP) de Cisco IOS XE Software podría permitir a un atacante local autenticado con bajos privilegios causar una condición de denegación de servicio (DoS) en un dispositivo afectado. Esta vulnerabilidad se debe a un manejo inadecuado de una solicitud SCP malformada. Un atacante podría explotar esta vulnerabilidad emitiendo un comando manipulado a través de SSH. Un exploit exitoso podría permitir al atacante causar que el dispositivo se recargue inesperadamente, lo que resultaría en una condición de DoS.

25 Mar 2026, 16:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-03-25 16:16

Updated : 2026-06-17 10:17

NVD link : CVE-2026-20083

Mitre link : CVE-2026-20083

CVE.ORG link : CVE-2026-20083

JSON object : View

Products Affected

No product.

CWE

CWE-235

Improper Handling of Extra Parameters

{"id": "CVE-2026-20083", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20083", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-27T15:01:43.724063Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 4.0, "exploitabilityScore": 2.0}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Cisco", "product": "Cisco IOS XE Software", "versions": [{"status": "affected", "version": "3.5.0E"}, {"status": "affected", "version": "3.5.1E"}, {"status": "affected", "version": "3.5.2E"}, {"status": "affected", "version": "3.5.3E"}, {"status": "affected", "version": "3.11.1S"}, {"status": "affected", "version": "3.11.2S"}, {"status": "affected", "version": "3.11.0S"}, {"status": "affected", "version": "3.11.3S"}, {"status": "affected", "version": "3.11.4S"}, {"status": "affected", "version": "3.12.0S"}, {"status": "affected", "version": "3.12.1S"}, {"status": "affected", "version": "3.12.2S"}, {"status": "affected", "version": "3.12.3S"}, {"status": "affected", "version": "3.12.0aS"}, {"status": "affected", "version": "3.12.4S"}, {"status": "affected", "version": "3.13.0S"}, {"status": "affected", "version": "3.13.1S"}, {"status": "affected", "version": "3.13.2S"}, {"status": "affected", "version": "3.13.3S"}, {"status": "affected", "version": "3.13.4S"}, {"status": "affected", "version": "3.13.5S"}, {"status": "affected", "version": "3.13.2aS"}, {"status": "affected", "version": "3.13.0aS"}, {"status": "affected", "version": "3.13.5aS"}, {"status": "affected", "version": "3.13.6S"}, {"status": "affected", "version": "3.13.7S"}, {"status": "affected", "version": "3.13.6aS"}, {"status": "affected", "version": "3.6.0E"}, {"status": "affected", "version": "3.6.1E"}, {"status": "affected", "version": "3.6.2aE"}, {"status": "affected", "version": "3.6.2E"}, {"status": "affected", "version": "3.6.3E"}, {"status": "affected", "version": "3.6.4E"}, {"status": "affected", "version": "3.6.5E"}, {"status": "affected", "version": "3.6.6E"}, {"status": "affected", "version": "3.6.5aE"}, {"status": "affected", "version": "3.14.0S"}, {"status": "affected", "version": "3.14.1S"}, {"status": "affected", "version": "3.14.2S"}, {"status": "affected", "version": "3.14.3S"}, {"status": "affected", "version": "3.14.4S"}, {"status": "affected", "version": "3.15.0S"}, {"status": "affected", "version": "3.15.1S"}, {"status": "affected", "version": "3.15.2S"}, {"status": "affected", "version": "3.15.1cS"}, {"status": "affected", "version": "3.15.3S"}, {"status": "affected", "version": "3.15.4S"}, {"status": "affected", "version": "3.7.0E"}, {"status": "affected", "version": "3.7.1E"}, {"status": "affected", "version": "3.7.2E"}, {"status": "affected", "version": "3.7.3E"}, {"status": "affected", "version": "3.7.4E"}, {"status": "affected", "version": "3.7.5E"}, {"status": "affected", "version": "3.16.0S"}, {"status": "affected", "version": "3.16.1S"}, {"status": "affected", "version": "3.16.1aS"}, {"status": "affected", "version": "3.16.2S"}, {"status": "affected", "version": "3.16.2aS"}, {"status": "affected", "version": "3.16.0cS"}, {"status": "affected", "version": "3.16.3S"}, {"status": "affected", "version": "3.16.2bS"}, {"status": "affected", "version": "3.16.3aS"}, {"status": "affected", "version": "3.16.4S"}, {"status": "affected", "version": "3.16.4aS"}, {"status": "affected", "version": "3.16.4bS"}, {"status": "affected", "version": "3.16.5S"}, {"status": "affected", "version": "3.16.4dS"}, {"status": "affected", "version": "3.17.0S"}, {"status": "affected", "version": "3.17.1S"}, {"status": "affected", "version": "3.17.2S"}, {"status": "affected", "version": "3.17.1aS"}, {"status": "affected", "version": "3.17.3S"}, {"status": "affected", "version": "3.8.0E"}, {"status": "affected", "version": "3.8.1E"}, {"status": "affected", "version": "3.8.2E"}, {"status": "affected", "version": "3.8.3E"}, {"status": "affected", "version": "3.18.0aS"}, {"status": "affected", "version": "3.18.0S"}, {"status": "affected", "version": "3.18.1S"}, {"status": "affected", "version": "3.18.2S"}, {"status": "affected", "version": "3.18.0SP"}, {"status": "affected", "version": "3.18.1SP"}, {"status": "affected", "version": "3.18.1aSP"}, {"status": "affected", "version": "3.18.1bSP"}, {"status": "affected", "version": "3.18.1cSP"}, {"status": "affected", "version": "3.9.0E"}, {"status": "affected", "version": "3.9.1E"}, {"status": "affected", "version": "16.6.1"}, {"status": "affected", "version": "16.6.2"}, {"status": "affected", "version": "16.6.3"}, {"status": "affected", "version": "16.6.4"}, {"status": "affected", "version": "16.6.5"}, {"status": "affected", "version": "16.6.4a"}, {"status": "affected", "version": "16.6.5a"}, {"status": "affected", "version": "16.6.6"}, {"status": "affected", "version": "16.6.7"}, {"status": "affected", "version": "16.6.8"}, {"status": "affected", "version": "16.6.9"}, {"status": "affected", "version": "16.6.10"}, {"status": "affected", "version": "16.7.1"}, {"status": "affected", "version": "16.7.1a"}, {"status": "affected", "version": "16.7.1b"}, {"status": "affected", "version": "16.7.2"}, {"status": "affected", "version": "16.7.3"}, {"status": "affected", "version": "16.7.4"}, {"status": "affected", "version": "16.8.1"}, {"status": "affected", "version": "16.8.1a"}, {"status": "affected", "version": "16.8.1b"}, {"status": "affected", "version": "16.8.1s"}, {"status": "affected", "version": "16.8.1c"}, {"status": "affected", "version": "16.8.1d"}, {"status": "affected", "version": "16.8.2"}, {"status": "affected", "version": "16.8.1e"}, {"status": "affected", "version": "16.8.3"}, {"status": "affected", "version": "16.9.1"}, {"status": "affected", "version": "16.9.2"}, {"status": "affected", "version": "16.9.1a"}, {"status": "affected", "version": "16.9.1b"}, {"status": "affected", "version": "16.9.1s"}, {"status": "affected", "version": "16.9.3"}, {"status": "affected", "version": "16.9.4"}, {"status": "affected", "version": "16.9.3a"}, {"status": "affected", "version": "16.9.5"}, {"status": "affected", "version": "16.9.5f"}, {"status": "affected", "version": "16.9.6"}, {"status": "affected", "version": "16.9.7"}, {"status": "affected", "version": "16.9.8"}, {"status": "affected", "version": "16.10.1"}, {"status": "affected", "version": "16.10.1a"}, {"status": "affected", "version": "16.10.1b"}, {"status": "affected", "version": "16.10.1s"}, {"status": "affected", "version": "16.10.1c"}, {"status": "affected", "version": "16.10.1e"}, {"status": "affected", "version": "16.10.1d"}, {"status": "affected", "version": "16.10.2"}, {"status": "affected", "version": "16.10.1f"}, {"status": "affected", "version": "16.10.1g"}, {"status": "affected", "version": "16.10.3"}, {"status": "affected", "version": "16.11.1"}, {"status": "affected", "version": "16.11.1a"}, {"status": "affected", "version": "16.11.1b"}, {"status": "affected", "version": "16.11.2"}, {"status": "affected", "version": "16.11.1s"}, {"status": "affected", "version": "16.12.1"}, {"status": "affected", "version": "16.12.1s"}, {"status": "affected", "version": "16.12.1a"}, {"status": "affected", "version": "16.12.1c"}, {"status": "affected", "version": "16.12.1w"}, {"status": "affected", "version": "16.12.2"}, {"status": "affected", "version": "16.12.1y"}, {"status": "affected", "version": "16.12.2a"}, {"status": "affected", "version": "16.12.3"}, {"status": "affected", "version": "16.12.8"}, {"status": "affected", "version": "16.12.2s"}, {"status": "affected", "version": "16.12.1x"}, {"status": "affected", "version": "16.12.1t"}, {"status": "affected", "version": "16.12.4"}, {"status": "affected", "version": "16.12.3s"}, {"status": "affected", "version": "16.12.3a"}, {"status": "affected", "version": "16.12.4a"}, {"status": "affected", "version": "16.12.5"}, {"status": "affected", "version": "16.12.6"}, {"status": "affected", "version": "16.12.1z1"}, {"status": "affected", "version": "16.12.5a"}, {"status": "affected", "version": "16.12.5b"}, {"status": "affected", "version": "16.12.1z2"}, {"status": "affected", "version": "16.12.6a"}, {"status": "affected", "version": "16.12.7"}, {"status": "affected", "version": "16.12.9"}, {"status": "affected", "version": "16.12.10"}, {"status": "affected", "version": "16.12.10a"}, {"status": "affected", "version": "16.12.11"}, {"status": "affected", "version": "16.12.12"}, {"status": "affected", "version": "16.12.13"}, {"status": "affected", "version": "16.12.14"}, {"status": "affected", "version": "17.1.1"}, {"status": "affected", "version": "17.1.1a"}, {"status": "affected", "version": "17.1.1s"}, {"status": "affected", "version": "17.1.1t"}, {"status": "affected", "version": "17.1.3"}, {"status": "affected", "version": "17.2.1"}, {"status": "affected", "version": "17.2.1r"}, {"status": "affected", "version": "17.2.1a"}, {"status": "affected", "version": "17.2.1v"}, {"status": "affected", "version": "17.2.2"}, {"status": "affected", "version": "17.2.3"}, {"status": "affected", "version": "17.3.1"}, {"status": "affected", "version": "17.3.2"}, {"status": "affected", "version": "17.3.3"}, {"status": "affected", "version": "17.3.1a"}, {"status": "affected", "version": "17.3.1w"}, {"status": "affected", "version": "17.3.2a"}, {"status": "affected", "version": "17.3.1x"}, {"status": "affected", "version": "17.3.1z"}, {"status": "affected", "version": "17.3.4"}, {"status": "affected", "version": "17.3.5"}, {"status": "affected", "version": "17.3.4a"}, {"status": "affected", "version": "17.3.6"}, {"status": "affected", "version": "17.3.4b"}, {"status": "affected", "version": "17.3.4c"}, {"status": "affected", "version": "17.3.5a"}, {"status": "affected", "version": "17.3.5b"}, {"status": "affected", "version": "17.3.7"}, {"status": "affected", "version": "17.3.8"}, {"status": "affected", "version": "17.3.8a"}, {"status": "affected", "version": "17.4.1"}, {"status": "affected", "version": "17.4.2"}, {"status": "affected", "version": "17.4.1a"}, {"status": "affected", "version": "17.4.1b"}, {"status": "affected", "version": "17.4.2a"}, {"status": "affected", "version": "17.5.1"}, {"status": "affected", "version": "17.5.1a"}, {"status": "affected", "version": "17.6.1"}, {"status": "affected", "version": "17.6.2"}, {"status": "affected", "version": "17.6.1w"}, {"status": "affected", "version": "17.6.1a"}, {"status": "affected", "version": "17.6.1x"}, {"status": "affected", "version": "17.6.3"}, {"status": "affected", "version": "17.6.1y"}, {"status": "affected", "version": "17.6.1z"}, {"status": "affected", "version": "17.6.3a"}, {"status": "affected", "version": "17.6.4"}, {"status": "affected", "version": "17.6.1z1"}, {"status": "affected", "version": "17.6.5"}, {"status": "affected", "version": "17.6.6"}, {"status": "affected", "version": "17.6.6a"}, {"status": "affected", "version": "17.6.5a"}, {"status": "affected", "version": "17.6.7"}, {"status": "affected", "version": "17.6.8"}, {"status": "affected", "version": "17.6.8a"}, {"status": "affected", "version": "17.7.1"}, {"status": "affected", "version": "17.7.1a"}, {"status": "affected", "version": "17.7.1b"}, {"status": "affected", "version": "17.7.2"}, {"status": "affected", "version": "17.10.1"}, {"status": "affected", "version": "17.10.1a"}, {"status": "affected", "version": "17.10.1b"}, {"status": "affected", "version": "17.8.1"}, {"status": "affected", "version": "17.8.1a"}, {"status": "affected", "version": "17.9.1"}, {"status": "affected", "version": "17.9.1w"}, {"status": "affected", "version": "17.9.2"}, {"status": "affected", "version": "17.9.1a"}, {"status": "affected", "version": "17.9.1x"}, {"status": "affected", "version": "17.9.1y"}, {"status": "affected", "version": "17.9.3"}, {"status": "affected", "version": "17.9.2a"}, {"status": "affected", "version": "17.9.1x1"}, {"status": "affected", "version": "17.9.3a"}, {"status": "affected", "version": "17.9.4"}, {"status": "affected", "version": "17.9.1y1"}, {"status": "affected", "version": "17.9.5"}, {"status": "affected", "version": "17.9.4a"}, {"status": "affected", "version": "17.9.5a"}, {"status": "affected", "version": "17.9.5b"}, {"status": "affected", "version": "17.9.6"}, {"status": "affected", "version": "17.9.6a"}, {"status": "affected", "version": "17.9.7"}, {"status": "affected", "version": "17.9.5e"}, {"status": "affected", "version": "17.9.5f"}, {"status": "affected", "version": "17.9.8"}, {"status": "affected", "version": "17.9.7a"}, {"status": "affected", "version": "17.9.7b"}, {"status": "affected", "version": "17.11.1"}, {"status": "affected", "version": "17.11.1a"}, {"status": "affected", "version": "17.12.1"}, {"status": "affected", "version": "17.12.1w"}, {"status": "affected", "version": "17.12.1a"}, {"status": "affected", "version": "17.12.1x"}, {"status": "affected", "version": "17.12.2"}, {"status": "affected", "version": "17.12.3"}, {"status": "affected", "version": "17.12.2a"}, {"status": "affected", "version": "17.12.1y"}, {"status": "affected", "version": "17.12.1z"}, {"status": "affected", "version": "17.12.4"}, {"status": "affected", "version": "17.12.3a"}, {"status": "affected", "version": "17.12.1z1"}, {"status": "affected", "version": "17.12.1z2"}, {"status": "affected", "version": "17.12.4a"}, {"status": "affected", "version": "17.12.5"}, {"status": "affected", "version": "17.12.4b"}, {"status": "affected", "version": "17.12.1z3"}, {"status": "affected", "version": "17.12.5a"}, {"status": "affected", "version": "17.12.1z4"}, {"status": "affected", "version": "17.12.6"}, {"status": "affected", "version": "17.12.5b"}, {"status": "affected", "version": "17.12.5c"}, {"status": "affected", "version": "17.12.6a"}, {"status": "affected", "version": "17.12.5d"}, {"status": "affected", "version": "17.12.6b"}, {"status": "affected", "version": "17.13.1"}, {"status": "affected", "version": "17.13.1a"}, {"status": "affected", "version": "17.14.1"}, {"status": "affected", "version": "17.14.1a"}, {"status": "affected", "version": "17.15.1"}, {"status": "affected", "version": "17.15.1w"}, {"status": "affected", "version": "17.15.1a"}, {"status": "affected", "version": "17.15.2"}, {"status": "affected", "version": "17.15.1b"}, {"status": "affected", "version": "17.15.1x"}, {"status": "affected", "version": "17.15.1z"}, {"status": "affected", "version": "17.15.3"}, {"status": "affected", "version": "17.15.2c"}, {"status": "affected", "version": "17.15.2a"}, {"status": "affected", "version": "17.15.1y"}, {"status": "affected", "version": "17.15.2b"}, {"status": "affected", "version": "17.15.3a"}, {"status": "affected", "version": "17.15.4"}, {"status": "affected", "version": "17.15.3b"}, {"status": "affected", "version": "17.15.4d"}, {"status": "affected", "version": "17.15.4e"}, {"status": "affected", "version": "17.16.1"}, {"status": "affected", "version": "17.16.1a"}, {"status": "affected", "version": "17.17.1"}, {"status": "affected", "version": "17.18.1"}, {"status": "affected", "version": "17.18.1w"}, {"status": "affected", "version": "17.18.1a"}]}]}], "published": "2026-03-25T16:16:12.903", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-scp-dos-duAdXtCg", "source": "psirt@cisco.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-235"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with low privileges to cause a denial of service (DoS) condition on an affected device.\r\n\r This vulnerability is due to improper handling of a malformed SCP request. An attacker could exploit this vulnerability by issuing a crafted command through SSH. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition."}, {"lang": "es", "value": "Una vulnerabilidad en la caracter\u00edstica de servidor del Secure Copy Protocol (SCP) de Cisco IOS XE Software podr\u00eda permitir a un atacante local autenticado con bajos privilegios causar una condici\u00f3n de denegaci\u00f3n de servicio (DoS) en un dispositivo afectado. Esta vulnerabilidad se debe a un manejo inadecuado de una solicitud SCP malformada. Un atacante podr\u00eda explotar esta vulnerabilidad emitiendo un comando manipulado a trav\u00e9s de SSH. Un exploit exitoso podr\u00eda permitir al atacante causar que el dispositivo se recargue inesperadamente, lo que resultar\u00eda en una condici\u00f3n de DoS."}], "lastModified": "2026-06-17T10:17:02.937", "sourceIdentifier": "psirt@cisco.com"}