Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-20177— Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability

CVSS 5.3 · Medium EPSS 0.39% · P32

Affected Version Matrix 14

VendorProductVersion RangeStatus
CiscoCisco Industrial Ethernet Switches1.1affected
1.2affected
1.8.0affected
1.8.2affected
1.7.0affected
1.3affected
1.9.1affected
1.6affected
… +6 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-20177

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the handling of management plane packets by Cisco Industrial Ethernet (IE) 1000 Series Switches could allow an unauthenticated, remote attacker to cause the device manager, SSH, or API to become inaccessible.This vulnerability is due to insufficient protection against management plane flooding attacks. An attacker could exploit this vulnerability by sending a high rate of ICMP, SSH, or HTTP traffic to an affected device. A successful exploit could allow the attacker to cause the CPU of the device to increase, resulting in a denial of service (DoS) condition on the device manager web GUI, SSH, or API. Data traffic through the device is not affected.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
不加限制或调节的资源分配
Source: CVE Program / CVE List V5

Affected Products

VendorProductAffected VersionsCPESubscribe
CiscoCisco Industrial Ethernet Switches 1.1 -

II. Public POCs for CVE-2026-20177

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-20177

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-20177 (1)

Same Patch Batch · Cisco · 2026-08-19 · 15 CVEs total

CVE-2026-2031510.0 CRITICALCisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Co
CVE-2026-2031710.0 CRITICALCisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentic
CVE-2026-2035810.0 CRITICALCisco Crosswork Security Hardening Release: August 2026
CVE-2026-2035710.0 CRITICALCisco Crosswork Security Hardening Release: August 2026
CVE-2026-2003010.0 CRITICALCisco Crosswork Security Hardening Release: August 2026
CVE-2026-203599.9 CRITICALCisco Crosswork Security Hardening Release: August 2026
CVE-2026-202319.9 CRITICALCisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutraliz
CVE-2026-203189.6 CRITICALCisco Secure Workload Software Security Hardening Release August 2026 - Improper Input Val
CVE-2026-203207.5 HIGHCisco BroadWorks OCI解析器XEE漏洞
CVE-2026-203197.5 HIGHCisco Secure Workload Software Security Hardening Release August 2026 - Buffer Management
CVE-2026-203276.5 MEDIUMCisco Unified Intelligence Center SQL Injection Vulnerability
CVE-2026-203026.1 MEDIUMCisco RoomOS Stack Overflow Vulnerability
CVE-2026-202325.4 MEDIUMCisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability
CVE-2026-203145.0 MEDIUMCisco Packaged Contact Center Enterprise & Cisco Unified Contact Center Enterprise Server-

IV. Related Vulnerabilities

Same product: Cisco Industrial Ethernet Switches
Same vendor: Cisco
Same weakness: CWE-770

V. Comments for CVE-2026-20177

No comments yet

Leave a comment