Detections
Analytics

Cisco IOS XE Software Web Based Management Interface Denial of Service (cisco-sa-webui-dos-qdc7qx3)

medium Nessus Plugin ID 339124

Language:

Synopsis

The remote device is missing a vendor-supplied security patch.

Description

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability.

 - A denial of service (DoS) vulnerability exists in the web-based management interface of Cisco IOS XE Software due to insufficient input validation. An authenticated, remote attacker can exploit this issue, via sending crafted input to the web-based management interface, to cause the web-based management interface to stop responding. (CVE-2026-20308)

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

Solution

Upgrade to the relevant fixed version referenced in Cisco bug ID CSCwu19075

See Also

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwu19075

http://www.nessus.org/u?badb66cd

Plugin Details

Severity: Medium

ID: 339124

File Name: cisco-sa-webui-dos-qdc7qx3-iosxe.nasl

Version: 1.1

Type: Combined

Family: CISCO

Published: 8/24/2026

Updated: 8/24/2026

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 1.2

Percentile: 0.01

CVSS v2

Risk Factor: Medium

Base Score: 4

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS Score Source: CVE-2026-20308

CVSS v3

Risk Factor: Medium

Base Score: 4.3

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Vulnerability Information

CPE: cpe:/o:cisco:ios_xe

Required KB Items: Host/Cisco/IOS-XE/Version

Patch Publication Date: 8/5/2026

Vulnerability Publication Date: 8/5/2026

Reference Information

CVE: CVE-2026-20308

CWE: 269

CISCO-SA: cisco-sa-webui-dos-qdc7qx3

IAVA: 2026-A-0807

CISCO-BUG-ID: CSCwu19075