CVE-2026-20080

Cisco IEC6400 Edge Compute Appliance SSH Denial of Service Vulnerability

Severity
Medium 5.3
CVSS 3.1
Remote · no auth what this means
Exploited
Not listed
EPSS
0.004
28.7th percentile
Discovered by
Vendor
Vendor-published field
Published
Jan 21, 2026
Assigned by cisco

Description

A vulnerability in the SSH service of Cisco IEC6400 Wireless Backhaul Edge Compute Software could allow an unauthenticated, remote attacker to cause the SSH service to stop responding. This vulnerability exists because the SSH service lacks effective flood protection. An attacker could exploit this vulnerability by initiating a denial of service (DoS) attack against the SSH port. A successful exploit could allow the attacker to cause the SSH service to be unresponsive during the period of the DoS attack. All other operations remain stable during the attack.

Weakness: CWE-400

Affected products

Vendor Product Category Matched by
Cisco Cisco Ultra-Reliable Wireless Backhaul Routing & Switching cna-assigner
Vendor-reported products (1)
  • Cisco · Cisco Ultra-Reliable Wireless Backhaul

Vendor advisory

cisco-sa-iec6400-Pem5uQ7v

Cisco IEC6400 Wireless Backhaul Edge Compute Software SSH Denial of Service Vulnerability

Cisco’s rating: Medium (advisory CVSS 5.3) · Published Jan 21, 2026

Bug ID: CSCws02393

The vendor’s rating applies to the whole advisory and can differ from this CVE’s own CVSS severity. Where this comes from

Something wrong here?