CVE-2026-20083 - Vulnerability Details - OpenCVE

A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with low privileges to cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to improper handling of a malformed SCP request. An attacker could exploit this vulnerability by issuing a crafted command through SSH. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-scp-dos-duAdXtCg

History

Wed, 25 Mar 2026 16:15:00 +0000

Type	Values Removed	Values Added
Description		A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of a malformed SCP request. An attacker could exploit this vulnerability by issuing a crafted command through SSH. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.
Weaknesses		CWE-235
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-scp-dos-duAdXtCg
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2026-03-25T16:07:32.842Z

Updated: 2026-03-25T16:07:32.842Z

Reserved: 2025-10-08T11:59:15.366Z

Link: CVE-2026-20083

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-03-25T16:16:12.903

Modified: 2026-03-25T16:16:12.903

Link: CVE-2026-20083

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-235

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20083", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2025-10-08T11:59:15.366Z", "datePublished": "2026-03-25T16:07:32.842Z", "dateUpdated": "2026-03-25T16:07:32.842Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-03-25T16:07:32.842Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with low privileges to cause a denial of service (DoS) condition on an affected device.\r\n\r This vulnerability is due to improper handling of a malformed SCP request. An attacker could exploit this vulnerability by issuing a crafted command through SSH. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition."}], "affected": [{"vendor": "Cisco", "product": "Cisco IOS XE Software", "versions": [{"version": "3.5.0E", "status": "affected"}, {"version": "3.5.1E", "status": "affected"}, {"version": "3.5.2E", "status": "affected"}, {"version": "3.5.3E", "status": "affected"}, {"version": "3.11.1S", "status": "affected"}, {"version": "3.11.2S", "status": "affected"}, {"version": "3.11.0S", "status": "affected"}, {"version": "3.11.3S", "status": "affected"}, {"version": "3.11.4S", "status": "affected"}, {"version": "3.12.0S", "status": "affected"}, {"version": "3.12.1S", "status": "affected"}, {"version": "3.12.2S", "status": "affected"}, {"version": "3.12.3S", "status": "affected"}, {"version": "3.12.0aS", "status": "affected"}, {"version": "3.12.4S", "status": "affected"}, {"version": "3.13.0S", "status": "affected"}, {"version": "3.13.1S", "status": "affected"}, {"version": "3.13.2S", "status": "affected"}, {"version": "3.13.3S", "status": "affected"}, {"version": "3.13.4S", "status": "affected"}, {"version": "3.13.5S", "status": "affected"}, {"version": "3.13.2aS", "status": "affected"}, {"version": "3.13.0aS", "status": "affected"}, {"version": "3.13.5aS", "status": "affected"}, {"version": "3.13.6S", "status": "affected"}, {"version": "3.13.7S", "status": "affected"}, {"version": "3.13.6aS", "status": "affected"}, {"version": "3.6.0E", "status": "affected"}, {"version": "3.6.1E", "status": "affected"}, {"version": "3.6.2aE", "status": "affected"}, {"version": "3.6.2E", "status": "affected"}, {"version": "3.6.3E", "status": "affected"}, {"version": "3.6.4E", "status": "affected"}, {"version": "3.6.5E", "status": "affected"}, {"version": "3.6.6E", "status": "affected"}, {"version": "3.6.5aE", "status": "affected"}, {"version": "3.14.0S", "status": "affected"}, {"version": "3.14.1S", "status": "affected"}, {"version": "3.14.2S", "status": "affected"}, {"version": "3.14.3S", "status": "affected"}, {"version": "3.14.4S", "status": "affected"}, {"version": "3.15.0S", "status": "affected"}, {"version": "3.15.1S", "status": "affected"}, {"version": "3.15.2S", "status": "affected"}, {"version": "3.15.1cS", "status": "affected"}, {"version": "3.15.3S", "status": "affected"}, {"version": "3.15.4S", "status": "affected"}, {"version": "3.7.0E", "status": "affected"}, {"version": "3.7.1E", "status": "affected"}, {"version": "3.7.2E", "status": "affected"}, {"version": "3.7.3E", "status": "affected"}, {"version": "3.7.4E", "status": "affected"}, {"version": "3.7.5E", "status": "affected"}, {"version": "3.16.0S", "status": "affected"}, {"version": "3.16.1S", "status": "affected"}, {"version": "3.16.1aS", "status": "affected"}, {"version": "3.16.2S", "status": "affected"}, {"version": "3.16.2aS", "status": "affected"}, {"version": "3.16.0cS", "status": "affected"}, {"version": "3.16.3S", "status": "affected"}, {"version": "3.16.2bS", "status": "affected"}, {"version": "3.16.3aS", "status": "affected"}, {"version": "3.16.4S", "status": "affected"}, {"version": "3.16.4aS", "status": "affected"}, {"version": "3.16.4bS", "status": "affected"}, {"version": "3.16.5S", "status": "affected"}, {"version": "3.16.4dS", "status": "affected"}, {"version": "3.17.0S", "status": "affected"}, {"version": "3.17.1S", "status": "affected"}, {"version": "3.17.2S", "status": "affected"}, {"version": "3.17.1aS", "status": "affected"}, {"version": "3.17.3S", "status": "affected"}, {"version": "3.8.0E", "status": "affected"}, {"version": "3.8.1E", "status": "affected"}, {"version": "3.8.2E", "status": "affected"}, {"version": "3.8.3E", "status": "affected"}, {"version": "3.18.0aS", "status": "affected"}, {"version": "3.18.0S", "status": "affected"}, {"version": "3.18.1S", "status": "affected"}, {"version": "3.18.2S", "status": "affected"}, {"version": "3.18.0SP", "status": "affected"}, {"version": "3.18.1SP", "status": "affected"}, {"version": "3.18.1aSP", "status": "affected"}, {"version": "3.18.1bSP", "status": "affected"}, {"version": "3.18.1cSP", "status": "affected"}, {"version": "3.9.0E", "status": "affected"}, {"version": "3.9.1E", "status": "affected"}, {"version": "16.6.1", "status": "affected"}, {"version": "16.6.2", "status": "affected"}, {"version": "16.6.3", "status": "affected"}, {"version": "16.6.4", "status": "affected"}, {"version": "16.6.5", "status": "affected"}, {"version": "16.6.4a", "status": "affected"}, {"version": "16.6.5a", "status": "affected"}, {"version": "16.6.6", "status": "affected"}, {"version": "16.6.7", "status": "affected"}, {"version": "16.6.8", "status": "affected"}, {"version": "16.6.9", "status": "affected"}, {"version": "16.6.10", "status": "affected"}, {"version": "16.7.1", "status": "affected"}, {"version": "16.7.1a", "status": "affected"}, {"version": "16.7.1b", "status": "affected"}, {"version": "16.7.2", "status": "affected"}, {"version": "16.7.3", "status": "affected"}, {"version": "16.7.4", "status": "affected"}, {"version": "16.8.1", "status": "affected"}, {"version": "16.8.1a", "status": "affected"}, {"version": "16.8.1b", "status": "affected"}, {"version": "16.8.1s", "status": "affected"}, {"version": "16.8.1c", "status": "affected"}, {"version": "16.8.1d", "status": "affected"}, {"version": "16.8.2", "status": "affected"}, {"version": "16.8.1e", "status": "affected"}, {"version": "16.8.3", "status": "affected"}, {"version": "16.9.1", "status": "affected"}, {"version": "16.9.2", "status": "affected"}, {"version": "16.9.1a", "status": "affected"}, {"version": "16.9.1b", "status": "affected"}, {"version": "16.9.1s", "status": "affected"}, {"version": "16.9.3", "status": "affected"}, {"version": "16.9.4", "status": "affected"}, {"version": "16.9.3a", "status": "affected"}, {"version": "16.9.5", "status": "affected"}, {"version": "16.9.5f", "status": "affected"}, {"version": "16.9.6", "status": "affected"}, {"version": "16.9.7", "status": "affected"}, {"version": "16.9.8", "status": "affected"}, {"version": "16.10.1", "status": "affected"}, {"version": "16.10.1a", "status": "affected"}, {"version": "16.10.1b", "status": "affected"}, {"version": "16.10.1s", "status": "affected"}, {"version": "16.10.1c", "status": "affected"}, {"version": "16.10.1e", "status": "affected"}, {"version": "16.10.1d", "status": "affected"}, {"version": "16.10.2", "status": "affected"}, {"version": "16.10.1f", "status": "affected"}, {"version": "16.10.1g", "status": "affected"}, {"version": "16.10.3", "status": "affected"}, {"version": "16.11.1", "status": "affected"}, {"version": "16.11.1a", "status": "affected"}, {"version": "16.11.1b", "status": "affected"}, {"version": "16.11.2", "status": "affected"}, {"version": "16.11.1s", "status": "affected"}, {"version": "16.12.1", "status": "affected"}, {"version": "16.12.1s", "status": "affected"}, {"version": "16.12.1a", "status": "affected"}, {"version": "16.12.1c", "status": "affected"}, {"version": "16.12.1w", "status": "affected"}, {"version": "16.12.2", "status": "affected"}, {"version": "16.12.1y", "status": "affected"}, {"version": "16.12.2a", "status": "affected"}, {"version": "16.12.3", "status": "affected"}, {"version": "16.12.8", "status": "affected"}, {"version": "16.12.2s", "status": "affected"}, {"version": "16.12.1x", "status": "affected"}, {"version": "16.12.1t", "status": "affected"}, {"version": "16.12.4", "status": "affected"}, {"version": "16.12.3s", "status": "affected"}, {"version": "16.12.3a", "status": "affected"}, {"version": "16.12.4a", "status": "affected"}, {"version": "16.12.5", "status": "affected"}, {"version": "16.12.6", "status": "affected"}, {"version": "16.12.1z1", "status": "affected"}, {"version": "16.12.5a", "status": "affected"}, {"version": "16.12.5b", "status": "affected"}, {"version": "16.12.1z2", "status": "affected"}, {"version": "16.12.6a", "status": "affected"}, {"version": "16.12.7", "status": "affected"}, {"version": "16.12.9", "status": "affected"}, {"version": "16.12.10", "status": "affected"}, {"version": "16.12.10a", "status": "affected"}, {"version": "16.12.11", "status": "affected"}, {"version": "16.12.12", "status": "affected"}, {"version": "16.12.13", "status": "affected"}, {"version": "16.12.14", "status": "affected"}, {"version": "17.1.1", "status": "affected"}, {"version": "17.1.1a", "status": "affected"}, {"version": "17.1.1s", "status": "affected"}, {"version": "17.1.1t", "status": "affected"}, {"version": "17.1.3", "status": "affected"}, {"version": "17.2.1", "status": "affected"}, {"version": "17.2.1r", "status": "affected"}, {"version": "17.2.1a", "status": "affected"}, {"version": "17.2.1v", "status": "affected"}, {"version": "17.2.2", "status": "affected"}, {"version": "17.2.3", "status": "affected"}, {"version": "17.3.1", "status": "affected"}, {"version": "17.3.2", "status": "affected"}, {"version": "17.3.3", "status": "affected"}, {"version": "17.3.1a", "status": "affected"}, {"version": "17.3.1w", "status": "affected"}, {"version": "17.3.2a", "status": "affected"}, {"version": "17.3.1x", "status": "affected"}, {"version": "17.3.1z", "status": "affected"}, {"version": "17.3.4", "status": "affected"}, {"version": "17.3.5", "status": "affected"}, {"version": "17.3.4a", "status": "affected"}, {"version": "17.3.6", "status": "affected"}, {"version": "17.3.4b", "status": "affected"}, {"version": "17.3.4c", "status": "affected"}, {"version": "17.3.5a", "status": "affected"}, {"version": "17.3.5b", "status": "affected"}, {"version": "17.3.7", "status": "affected"}, {"version": "17.3.8", "status": "affected"}, {"version": "17.3.8a", "status": "affected"}, {"version": "17.4.1", "status": "affected"}, {"version": "17.4.2", "status": "affected"}, {"version": "17.4.1a", "status": "affected"}, {"version": "17.4.1b", "status": "affected"}, {"version": "17.4.2a", "status": "affected"}, {"version": "17.5.1", "status": "affected"}, {"version": "17.5.1a", "status": "affected"}, {"version": "17.6.1", "status": "affected"}, {"version": "17.6.2", "status": "affected"}, {"version": "17.6.1w", "status": "affected"}, {"version": "17.6.1a", "status": "affected"}, {"version": "17.6.1x", "status": "affected"}, {"version": "17.6.3", "status": "affected"}, {"version": "17.6.1y", "status": "affected"}, {"version": "17.6.1z", "status": "affected"}, {"version": "17.6.3a", "status": "affected"}, {"version": "17.6.4", "status": "affected"}, {"version": "17.6.1z1", "status": "affected"}, {"version": "17.6.5", "status": "affected"}, {"version": "17.6.6", "status": "affected"}, {"version": "17.6.6a", "status": "affected"}, {"version": "17.6.5a", "status": "affected"}, {"version": "17.6.7", "status": "affected"}, {"version": "17.6.8", "status": "affected"}, {"version": "17.6.8a", "status": "affected"}, {"version": "17.7.1", "status": "affected"}, {"version": "17.7.1a", "status": "affected"}, {"version": "17.7.1b", "status": "affected"}, {"version": "17.7.2", "status": "affected"}, {"version": "17.10.1", "status": "affected"}, {"version": "17.10.1a", "status": "affected"}, {"version": "17.10.1b", "status": "affected"}, {"version": "17.8.1", "status": "affected"}, {"version": "17.8.1a", "status": "affected"}, {"version": "17.9.1", "status": "affected"}, {"version": "17.9.1w", "status": "affected"}, {"version": "17.9.2", "status": "affected"}, {"version": "17.9.1a", "status": "affected"}, {"version": "17.9.1x", "status": "affected"}, {"version": "17.9.1y", "status": "affected"}, {"version": "17.9.3", "status": "affected"}, {"version": "17.9.2a", "status": "affected"}, {"version": "17.9.1x1", "status": "affected"}, {"version": "17.9.3a", "status": "affected"}, {"version": "17.9.4", "status": "affected"}, {"version": "17.9.1y1", "status": "affected"}, {"version": "17.9.5", "status": "affected"}, {"version": "17.9.4a", "status": "affected"}, {"version": "17.9.5a", "status": "affected"}, {"version": "17.9.5b", "status": "affected"}, {"version": "17.9.6", "status": "affected"}, {"version": "17.9.6a", "status": "affected"}, {"version": "17.9.7", "status": "affected"}, {"version": "17.9.5e", "status": "affected"}, {"version": "17.9.5f", "status": "affected"}, {"version": "17.9.8", "status": "affected"}, {"version": "17.9.7a", "status": "affected"}, {"version": "17.9.7b", "status": "affected"}, {"version": "17.11.1", "status": "affected"}, {"version": "17.11.1a", "status": "affected"}, {"version": "17.12.1", "status": "affected"}, {"version": "17.12.1w", "status": "affected"}, {"version": "17.12.1a", "status": "affected"}, {"version": "17.12.1x", "status": "affected"}, {"version": "17.12.2", "status": "affected"}, {"version": "17.12.3", "status": "affected"}, {"version": "17.12.2a", "status": "affected"}, {"version": "17.12.1y", "status": "affected"}, {"version": "17.12.1z", "status": "affected"}, {"version": "17.12.4", "status": "affected"}, {"version": "17.12.3a", "status": "affected"}, {"version": "17.12.1z1", "status": "affected"}, {"version": "17.12.1z2", "status": "affected"}, {"version": "17.12.4a", "status": "affected"}, {"version": "17.12.5", "status": "affected"}, {"version": "17.12.4b", "status": "affected"}, {"version": "17.12.1z3", "status": "affected"}, {"version": "17.12.5a", "status": "affected"}, {"version": "17.12.1z4", "status": "affected"}, {"version": "17.12.6", "status": "affected"}, {"version": "17.12.5b", "status": "affected"}, {"version": "17.12.5c", "status": "affected"}, {"version": "17.12.6a", "status": "affected"}, {"version": "17.12.5d", "status": "affected"}, {"version": "17.12.6b", "status": "affected"}, {"version": "17.13.1", "status": "affected"}, {"version": "17.13.1a", "status": "affected"}, {"version": "17.14.1", "status": "affected"}, {"version": "17.14.1a", "status": "affected"}, {"version": "17.15.1", "status": "affected"}, {"version": "17.15.1w", "status": "affected"}, {"version": "17.15.1a", "status": "affected"}, {"version": "17.15.2", "status": "affected"}, {"version": "17.15.1b", "status": "affected"}, {"version": "17.15.1x", "status": "affected"}, {"version": "17.15.1z", "status": "affected"}, {"version": "17.15.3", "status": "affected"}, {"version": "17.15.2c", "status": "affected"}, {"version": "17.15.2a", "status": "affected"}, {"version": "17.15.1y", "status": "affected"}, {"version": "17.15.2b", "status": "affected"}, {"version": "17.15.3a", "status": "affected"}, {"version": "17.15.4", "status": "affected"}, {"version": "17.15.3b", "status": "affected"}, {"version": "17.15.4d", "status": "affected"}, {"version": "17.15.4e", "status": "affected"}, {"version": "17.16.1", "status": "affected"}, {"version": "17.16.1a", "status": "affected"}, {"version": "17.17.1", "status": "affected"}, {"version": "17.18.1", "status": "affected"}, {"version": "17.18.1w", "status": "affected"}, {"version": "17.18.1a", "status": "affected"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Handling of Extra Parameters", "type": "cwe", "cweId": "CWE-235"}]}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-scp-dos-duAdXtCg", "name": "cisco-sa-scp-dos-duAdXtCg"}], "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}}], "exploits": [{"lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "source": {"advisory": "cisco-sa-scp-dos-duAdXtCg", "discovery": "INTERNAL", "defects": ["CSCwr59895"]}}}}