Cisco Broadband Operating System vulnerabilities

4 CVEs affecting Cisco Broadband Operating System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2001-0058, published 2001-02-16.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2001-0058, published 2001-02-16. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. The Web interface to Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a URL that does not end in a space character.
• CVE-2001-0056, published 2001-02-16. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords without detection.
• CVE-2001-0055, published 2001-02-16. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of service via a slow stream of TCP SYN packets.
• CVE-2001-0057, published 2001-02-16. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP echo (ping) packet.