CVE 7.7 HIGH

Cisco SG350 and SG350X Series Managed Switches SNMP Denial of Service Vunerability_CVE-2026-20185

7.7 / 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Description

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco 350 Series Managed Switches (SG350) and Cisco 350X Series Stackable Managed Switches (SG350X) firmware could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. 

This vulnerability is due to improper error handling when parsing response data for a specific SNMP request. An attacker could exploit this vulnerability by sending a specific SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.
This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMPv2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMPv3, the attacker must have valid SNMP user credentials for the affected system.

Basic Information

ID CVE-2026-20185
Source cisco
Published May 6, 2026 at 16:15

Affected Product

Vendor Cisco
Product Cisco Small Business Smart and Managed Switches
Version 2.5.9.54
Affected Versions Cisco Cisco Small Business Smart and Managed Switches 2.5.9.54
Cisco Cisco Small Business Smart and Managed Switches 2.5.9.55

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.