Published: 22/01/2025 Updated: 18/02/2025

Denial of Service Vulnerability in Cisco BroadWorks SIP Processing

A vulnerability exists in the SIP processing subsystem of Cisco BroadWorks. It could let an unauthenticated, remote attacker stop the processing of incoming SIP requests. This results in a denial of service (DoS) condition. The problem comes from improper memory handling for some SIP requests. An attacker might exploit this by sending many SIP requests to the affected system. If successful, this exploit could use up all the memory assigned to Cisco BroadWorks Network Servers handling SIP traffic. When memory runs out, the servers cannot process incoming requests, causing a DoS condition that needs manual intervention to fix.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco cisco broadworks

Cisco warns of denial of service flaw with PoC exploit code

BleepingComputer • Sergiu Gatlan • 22 Jan 2025

Cisco warns of denial of service flaw with PoC exploit code By Sergiu Gatlan January 22, 2025 01:47 PM 0 Cisco has released security updates to patch a ClamAV denial-of-service (DoS) vulnerability, which has proof-of-concept (PoC) exploit code. Tracked as CVE-2025-20128, the vulnerability is caused by a heap-based buffer overflow weakness in the Object Linking and Embedding 2 (OLE2) decryption routine, allowing unauthenticated, remote attackers to trigger a DoS condition on vulnerable devices. I...

CVE-2025-20165

Vulnerability Summary

Vulnerability Trend

Recent Articles

References

Vulmon Search

About

Products

Connect