CVE-2023-20262

A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH access only. This vulnerability does not prevent the system from continuing to function, and web UI access is not affected. This vulnerability is due to insufficient resource management when an affected system is in an error condition. An attacker could exploit this vulnerability by sending malicious traffic to the affected system. A successful exploit could allow the attacker to cause the SSH process to crash and restart, resulting in a DoS condition for the SSH service.

• CWE-399

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vman-sc-LRLfu2zVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vman-sc-LRLfu2zVendor Advisory

Published

Sep 27, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20257A vulnerability in the web-based management interface of Cis…4.8
• CVE-2023-20258A vulnerability in the web-based management interface of Cis…7.2
• CVE-2023-20259A vulnerability in an API endpoint of multiple Cisco Unified…7.5
• CVE-2023-2026The Image Protector WordPress plugin through 1.1 does not pr…4.8
• CVE-2023-20260A vulnerability in the application CLI of Cisco Prime Infras…6.7
• CVE-2023-20261A vulnerability in the web UI of Cisco Catalyst SD-WAN Manag…6.5
• CVE-2023-20263A vulnerability in the web-based management interface of Cis…6.1
• CVE-2023-20264A vulnerability in the implementation of Security Assertion …6.1
• CVE-2023-20265A vulnerability in the web-based management interface of a s…5.4
• CVE-2023-20266A vulnerability in Cisco Emergency Responder, Cisco Unified …7.2
• CVE-2023-20267A vulnerability in the IP geolocation rules of Snort 3 could…5.3
• CVE-2023-20268A vulnerability in the packet processing functionality of Ci…4.7