Aller au contenu
en Se connecter
6.1 Moyenne

CVE-2026-20115 A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated attacker to view…

Description

A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated attacker to view confidential device information. This vulnerability is due to a device configuration upload being performed over an insecure tunnel. An attacker could exploit this vulnerability by conducting an on-path attack between the affected device and the Cisco Meraki Dashboard. A successful exploit could allow the attacker to view sensitive device configuration information.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco IOS XE Software 17.18 17.18.1w → 17.18.1 Pas de correctif indiqué
Cisco IOS XE Software 17.17.1 Pas de correctif indiqué
Cisco IOS XE Software 17.16 17.16.1a → 17.16.1 Pas de correctif indiqué
Cisco IOS XE Software 17.15 17.15.1w → 17.15.4 Pas de correctif indiqué
Cisco IOS XE Software 17.14 17.14.1a → 17.14.1 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco IOS XE Software

Les 248 CVE de Cisco IOS XE Software →
CVE-2026-20311 A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote… 6.3 Moyenne CVE-2026-20301 A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of… 8.6 Élevée CVE-2026-20308 A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote… 4.3 Moyenne CVE-2026-20273 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering… 8.6 Élevée
Suivre cette CVE