CVE-2026-20080

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20080", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2025-10-08T11:59:15.363Z", "datePublished": "2026-01-21T16:26:06.467Z", "dateUpdated": "2026-01-21T16:47:39.610Z"}, "containers": {"cna": {"title": "Cisco IEC6400 Edge Compute Appliance SSH Denial of Service Vulnerability", "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW"}}], "descriptions": [{"lang": "en", "value": "A vulnerability in the SSH service of Cisco IEC6400 Wireless Backhaul Edge Compute Software could allow an unauthenticated, remote attacker to cause the SSH service to stop responding.\r\n\r\nThis vulnerability exists because the SSH service lacks effective flood protection. An attacker could exploit this vulnerability by initiating a denial of service (DoS) attack against the SSH port. A successful exploit could allow the attacker to cause the SSH service to be unresponsive during the period of the DoS attack. All other operations remain stable during the attack."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iec6400-Pem5uQ7v", "name": "cisco-sa-iec6400-Pem5uQ7v"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "source": {"advisory": "cisco-sa-iec6400-Pem5uQ7v", "discovery": "INTERNAL", "defects": ["CSCws02393"]}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "Uncontrolled Resource Consumption", "type": "cwe", "cweId": "CWE-400"}]}], "affected": [{"vendor": "Cisco", "product": "Cisco Ultra-Reliable Wireless Backhaul", "versions": [{"version": "1.0.0", "status": "affected"}, {"version": "1.1.0", "status": "affected"}, {"version": "1.0.2", "status": "affected"}, {"version": "1.0.1", "status": "affected"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-01-21T16:26:06.467Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-21T16:47:12.943836Z", "id": "CVE-2026-20080", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-21T16:47:39.610Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-20080", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-21T16:47:12.943836Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-21T16:47:32.237Z"}}], "cna": {"title": "Cisco IEC6400 Edge Compute Appliance SSH Denial of Service Vulnerability", "source": {"defects": ["CSCws02393"], "advisory": "cisco-sa-iec6400-Pem5uQ7v", "discovery": "INTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Ultra-Reliable Wireless Backhaul", "versions": [{"status": "affected", "version": "1.0.0"}, {"status": "affected", "version": "1.1.0"}, {"status": "affected", "version": "1.0.2"}, {"status": "affected", "version": "1.0.1"}], "defaultStatus": "unknown"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iec6400-Pem5uQ7v", "name": "cisco-sa-iec6400-Pem5uQ7v"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the SSH service of Cisco IEC6400 Wireless Backhaul Edge Compute Software could allow an unauthenticated, remote attacker to cause the SSH service to stop responding.\r\n\r\nThis vulnerability exists because the SSH service lacks effective flood protection. An attacker could exploit this vulnerability by initiating a denial of service (DoS) attack against the SSH port. A successful exploit could allow the attacker to cause the SSH service to be unresponsive during the period of the DoS attack. All other operations remain stable during the attack."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-400", "description": "Uncontrolled Resource Consumption"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-01-21T16:26:06.467Z"}}}, "cveMetadata": {"cveId": "CVE-2026-20080", "state": "PUBLISHED", "dateUpdated": "2026-01-21T16:47:39.610Z", "dateReserved": "2025-10-08T11:59:15.363Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2026-01-21T16:26:06.467Z", "assignerShortName": "cisco"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Cisco Ultra-Reliable Wireless Backhaul", "vendor": "Cisco", "versions": [{"status": "affected", "version": "1.0.0"}, {"status": "affected", "version": "1.1.0"}, {"status": "affected", "version": "1.0.2"}, {"status": "affected", "version": "1.0.1"}]}], "source": "psirt@cisco.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the SSH service of Cisco IEC6400 Wireless Backhaul Edge Compute Software could allow an unauthenticated, remote attacker to cause the SSH service to stop responding.\r\n\r\nThis vulnerability exists because the SSH service lacks effective flood protection. An attacker could exploit this vulnerability by initiating a denial of service (DoS) attack against the SSH port. A successful exploit could allow the attacker to cause the SSH service to be unresponsive during the period of the DoS attack. All other operations remain stable during the attack."}, {"lang": "es", "value": "Una vulnerabilidad en el servicio SSH de Cisco IEC6400 Wireless Backhaul Edge Compute Software podr\u00eda permitir a un atacante remoto no autenticado que el servicio SSH deje de responder.\n\nEsta vulnerabilidad existe porque el servicio SSH carece de protecci\u00f3n eficaz contra inundaciones. Un atacante podr\u00eda explotar esta vulnerabilidad al iniciar un ataque de denegaci\u00f3n de servicio (DoS) contra el puerto SSH. Un exploit exitoso podr\u00eda permitir al atacante que el servicio SSH no responda durante el per\u00edodo del ataque DoS. Todas las dem\u00e1s operaciones permanecen estables durante el ataque."}], "id": "CVE-2026-20080", "lastModified": "2026-06-17T10:17:02.620", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "psirt@cisco.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20080", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-01-21T16:47:12.943836Z", "version": "2.0.3"}}]}, "published": "2026-01-21T17:16:08.410", "references": [{"source": "psirt@cisco.com", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iec6400-Pem5uQ7v"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-400"}], "source": "psirt@cisco.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T04:14:19.422692+00:00", "value": {"mitigation_remediation": ["Update the Cisco IEC6400 firmware to the version that includes the SSH flood\u2011protection fix as detailed in the Cisco security advisory.", "Configure network devices or firewall rules to limit the rate of incoming SSH connections from individual IP addresses, reducing the effectiveness of flood attempts.", "Enable any device\u2011level SSH rate limiting or resource\u2011usage controls that are available in the software to mitigate potential service disruption."], "summary": {"action": "Apply Fix", "impact": "Remote Denial of Service"}, "threat_synthesis": {"affected_systems": "The affected product is the Cisco IEC6400 Wireless Backhaul Edge Compute Software, part of Cisco Ultra\u2011Reliable Wireless Backhaul. The vendor and product name are provided by Cisco\u2019s CNA. No specific version information is listed in the advisory, so devices of any build that contains the exposed SSH daemon are potentially vulnerable until updated.", "description_and_impact": "An attacker can exploit the SSH service on Cisco IEC6400 Wireless Backhaul Edge Compute Software by sending a flood of connection requests. Because the service lacks effective flood protection, the SSH daemon becomes unresponsive, resulting in a denial of service limited to SSH access. This vulnerability is categorized as CWE\u2011400 due to uncontrolled resource consumption. The effect is that remote users cannot authenticate via SSH but other device functions continue to operate normally.", "risk_and_exploitability": "The CVSS base score is 5.3, indicating moderate severity, and the EPSS score is below 1%, suggesting a low likelihood of exploitation in the wild. The vulnerability is not currently listed in the CISA KEV catalog. Exploitation requires no special credentials; an unauthenticated attacker can initiate a DoS by repeatedly targeting the SSH port, causing the service to halt for the duration of the attack. As the rest of the system remains unaffected, the overall impact is a loss of remote management connectivity rather than broader system compromise."}}}}, "created": "2026-01-22T10:14:50.570357+00:00", "updated": "2026-04-18T04:15:05.884907+00:00", "vendors": ["cisco", "cisco$PRODUCT$iec6400_wireless_backhaul_edge_compute"]}