CveMateVulnerability intelligence

Cisco Cbos vulnerabilities

9 vulnerabilities

Known vulnerabilities in Cisco Cbos, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2007-4430ciscocbos+219y ago20-08-2007 19:00

Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service (device restart and BGP routing table rebuild) via certain regular expressions in a "show ip bgp regexp" command. NOTE: unauthenticated remote attacks are possible in environments with anonymous telnet and Looking Glass access.CVE-2001-1064ciscocbos24y ago02-02-2002 05:00

Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the (1) HTTP or (2) telnet service, which causes the router to become unresponsive and stop forwarding packets.CVE-2001-1065ciscocbos24y ago02-02-2002 05:00

Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap binds itself to port 80 even when web-based configuration services are disabled, which could leave the router open to attack.CVE-2001-0752ciscocbos24y ago09-03-2002 05:00

Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an ICMP ECHO REQUEST (ping) with the IP Record Route option set.CVE-2001-0444ciscocbos24y ago09-03-2002 05:00

Cisco CBOS 2.3.0.053 sends output of the "sh nat" (aka "show nat") command to the terminal of the next user who attempts to connect to the router via telnet, which could allow that user to obtain sensitive information.CVE-2001-0754ciscocbos24y ago09-03-2002 05:00

Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY (ping) packets, which cause it to enter ROMMON mode and stop forwarding packets.CVE-2001-0751ciscocbos24y ago09-03-2002 05:00

Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which allows remote attackers to spoof or hijack TCP connections.CVE-2001-0753ciscocbos25y ago12-10-2001 04:00

Cisco CBOS 2.3.8 and earlier stores the passwords for (1) exec and (2) enable in cleartext in the NVRAM and a configuration file, which could allow unauthorized users to obtain the passwords and gain privileges.CVE-2002-0886ciscocbos24y ago31-08-2002 04:00

Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memory consumption) via (1) a large packet to the DHCP port, (2) a large packet to the Telnet port, or (3) a flood of large packets to the CPE, which causes the TCP/IP stack to consume large amounts of memory.