CVE-2002-0886: Cisco Cbos

Medium severity, CVSS 5.0. EPSS: 5.4% chance of exploitation in the next 30 days.

Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memory consumption) via (1) a large packet to the DHCP port, (2) a large packet to the Telnet port, or (3) a flood of large packets to the CPE, which causes the TCP/IP stack to consume large amounts of memory.

Affected products

• Cisco Cbos: version 2.0.1 only; version 2.1.0 only; version 2.1.0a only; version 2.2.0 only; version 2.2.1 only; version 2.2.1a only; …

Published 2002-10-04. Last modified 2026-06-16.