EUVD-2026-53452
GHSA-wrfp-gcwf-q2vv
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Network-accessible unauthenticated parse flaw with no special conditions; Changed scope reflects device reload cascading availability loss to all downstream network-dependent systems.
Primary rating from Vendor (cisco).
CVSS VectorVendor: cisco
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Lifecycle Timeline
2DescriptionCVE.org
A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to improper handling when parsing a specific BEEP SOAP request. An attacker could exploit this vulnerability by sending a specific BEEP SOAP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.
AnalysisAI
Denial-of-service in Cisco IOS XE Software's Blocks Extensible Exchange Protocol (BEEP) feature allows an unauthenticated remote attacker to force an unexpected device reload by sending a specially crafted BEEP SOAP request. The CVSS 8.6 score with Changed scope (S:C) reflects that a device reload disrupts all network services downstream of the affected device, amplifying impact beyond the immediate target. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The BEEP (Blocks Extensible Exchange Protocol) feature must be explicitly configured and enabled on the Cisco IOS XE device - BEEP is not a default-enabled service in standard IOS XE deployments, limiting the exposed population to devices where an administrator has deliberately configured BEEP functionality. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.6 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) presents a high real-world risk signal: the attack requires no authentication, no user interaction, and low complexity, and is exploitable over the network. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with network access to a Cisco IOS XE device - whether via direct internet exposure, VPN, or internal lateral movement - identifies a device with the BEEP feature enabled and sends a single specially crafted BEEP SOAP request to the BEEP listener port. The malformed request triggers the CWE-388 error-handling failure in the BEEP parser, causing the IOS XE process to crash and the device to reload unexpectedly, dropping all active sessions and disrupting routing or switching for the duration of the reload cycle. … |
| Remediation | The primary remediation is to upgrade to a fixed Cisco IOS XE Software release as specified in the Cisco Security Advisory cisco-sa-iosxe-bing-MGHrFAkd (https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-bing-MGHrFAkd). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Inventory all Cisco IOS XE devices with BEEP enabled and determine internet/network exposure; disable BEEP via configuration where operationally feasible. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Cisco Ios Xe Software
View allImproper neutralization of special elements (CWE-74 injection class) in Cisco IOS XE Software allows remote, unauthentic
Authentication bypass and improper access control in Cisco IOS XE Software allow a remote, unauthenticated attacker to g
Denial-of-service via malformed XMCP packets forces unexpected reloads of Cisco IOS and IOS XE devices, exploitable by a
Unauthenticated remote denial-of-service affecting Cisco IOS XE Software across a wide version range results from multip
Unauthenticated remote denial-of-service in Cisco IOS XE Software allows network-accessible attackers to crash IOS proce
Denial-of-service conditions in Cisco IOS XE Software stem from multiple incorrect calculation flaws (CWE-682) discovera
Unauthenticated remote attackers can cause high availability impact with scope change on Cisco IOS XE Software through i
Remote unauthenticated exploitation of improper memory buffer boundary handling in Cisco IOS XE Software can cause a com
Denial of service in Cisco IOS XE Software's SNMP subsystem allows an authenticated remote attacker to force an affected
Denial of service in Cisco IOS XE Software's web-based management interface allows an authenticated remote attacker with
Denial-of-service in Cisco IOS XE Software's web-based management interface (WebUI) allows an authenticated remote attac
Same weakness CWE-388 – 7PK - Errors
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today