cisco cbos vulnerabilities and exploits

(subscribe to this query)

Cisco DSL CPE devices running CBOS 2.4.4 and previous versions allows remote malicious users to cause a denial of service (hang or memory consumption) via (1) a large packet to the DHCP port, (2) a large packet to the Telnet port, or (3) a flood of large packets to the CPE, which...

Cisco Cbos 2.0.1 Cisco Cbos 2.1.0 Cisco Cbos 2.1.0a Cisco Cbos 2.2.0 Cisco Cbos 2.2.1 Cisco Cbos 2.2.1a Cisco Cbos 2.3 Cisco Cbos 2.3.2 Cisco Cbos 2.3.5 Cisco Cbos 2.3.5.015 Cisco Cbos 2.3.7 Cisco Cbos 2.3.7.002

1 EDB exploit

Cisco 600 series routers running CBOS 2.0.1 up to and including 2.4.2ap allows remote malicious users to cause a denial of service via multiple connections to the router on the (1) HTTP or (2) telnet service, which causes the router to become unresponsive and stop forwarding pack...

Cisco Cbos Cisco Cbos 2.0.1 Cisco Cbos 2.1.0 Cisco Cbos 2.1.0a Cisco Cbos 2.2.0 Cisco Cbos 2.2.1 Cisco Cbos 2.2.1a Cisco Cbos 2.3 Cisco Cbos 2.3.2 Cisco Cbos 2.3.5 Cisco Cbos 2.3.7 Cisco Cbos 2.3.8

1 EDB exploit

Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 up to and including 2.4.2ap binds itself to port 80 even when web-based configuration services are disabled, which could leave the router open to attack.

Cisco Cbos Cisco Cbos 2.0.1

Cisco CBOS 2.3.0.053 sends output of the "sh nat" (aka "show nat") command to the terminal of the next user who attempts to connect to the router via telnet, which could allow that user to obtain sensitive information.

Cisco Cbos 2.3.053 Cisco Cbos 2.4.1

Cisco CBOS 2.3.8 and previous versions stores the passwords for (1) exec and (2) enable in cleartext in the NVRAM and a configuration file, which could allow unauthorized users to obtain the passwords and gain privileges.

Cisco switches and routers running CBOS 2.3.8 and previous versions use predictable TCP Initial Sequence Numbers (ISN), which allows remote malicious users to spoof or hijack TCP connections.

1 EDB exploit

Cisco CBOS 2.3.8 and previous versions allows remote malicious users to cause a denial of service via an ICMP ECHO REQUEST (ping) with the IP Record Route option set.

Cisco CBOS 2.3.8 and previous versions allows remote malicious users to cause a denial of service via a series of large ICMP ECHO REPLY (ping) packets, which cause it to enter ROMMON mode and stop forwarding packets.

Unspecified vulnerability in Cisco IOS 12.0 up to and including 12.4 allows context-dependent malicious users to cause a denial of service (device restart and BGP routing table rebuild) via certain regular expressions in a "show ip bgp regexp" command. NOTE: unauthentic...

Cisco Cli Cisco Cbos Cisco Cbos 12.1 Cisco Cbos 12.2 Cisco Ids Cisco Ios 10.0 Cisco Ios 10.3 Cisco Ios 11.0 Cisco Ios 11.1 Cisco Ios 11.2 Cisco Ios 12.0 Cisco Ios 12.1

1 EDB exploit

Cisco 600 routers running CBOS 2.4.1 and previous versions allow remote malicious users to cause a denial of service via a large ICMP echo (ping) packet.

Cisco Broadband Operating System Cisco Cisco 6xx Routers

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook