This vulnerability arises from improper handling of extra parameters in the SCP server feature of Cisco IOS XE Software. An authenticated attacker with low privileges can issue a crafted SCP command over SSH that triggers a device reload, resulting in a denial of service condition. The issue affects a wide range of IOS XE versions. The CVSS 3.1 score is 6.5, reflecting a medium severity with local attack vector, low attack complexity, low privileges required, no user interaction, and impact limited to availability (device reload).

An authenticated local attacker with low privileges can cause the affected Cisco IOS XE device to reload unexpectedly, leading to a denial of service. There is no impact on confidentiality or integrity reported. This disrupts network availability but does not allow data compromise or unauthorized access beyond the authenticated user context.

Patch status is not confirmed from the provided information. Users should monitor Cisco's official security advisories for patches or updates addressing this vulnerability. Until a patch is applied, restrict SCP server access to trusted administrators and consider disabling SCP if not required to reduce exposure. No vendor advisory content was provided to indicate if the issue is already mitigated or if no action is required.