An authenticated local attacker who has low‑privilege access to the device’s management CLI can issue the start maintenance command, which the system incorrectly authorizes. The command forces the device into maintenance mode, shutting down all interfaces and disabling network service, resulting in a denial of service. The flaw is an example of improper privilege management (CWE‑266).

Cisco IOS XE Software. Specific version information is not published in the advisory, so any installation that allows the start maintenance command via the CLI could be vulnerable.

The CVSS base score of 6.5 indicates moderate severity. No EPSS score is available and the vulnerability is not listed in the CISA KEV catalogue. Exploitation requires only local authenticated access, meaning a user with low‑privilege rights on the device can trigger the denial of service. Remote exploitation is not described, so the attack surface is limited to insiders who have physical or pre‑authenticated network access.