Cisco Cbos vulnerabilities

9 CVEs affecting Cisco Cbos, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-4430, published 2007-08-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-4430, published 2007-08-20. Medium severity, CVSS 5.0. EPSS: 13.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service (device restart and BGP routing table rebuild) via certain regular expressions…
CVE-2002-0886, published 2002-10-04. Medium severity, CVSS 5.0. EPSS: 5.4% chance of exploitation in the next 30 days. Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memory consumption) via (1) a large packet to the DHCP port, (2) a large packet to…
CVE-2001-1064, published 2001-08-31. Medium severity, CVSS 5.0. EPSS: 5.4% chance of exploitation in the next 30 days. Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the (1) HTTP or (2) telnet service, which…
CVE-2001-0751, published 2001-10-18. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which allows remote attackers to spoof or hijack TCP connections.
CVE-2001-0752, published 2001-10-18. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an ICMP ECHO REQUEST (ping) with the IP Record Route option set.
CVE-2001-0754, published 2001-10-18. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY (ping) packets, which cause it to enter ROMMON mode and stop forwarding packets.
CVE-2001-0753, published 2001-10-18. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco CBOS 2.3.8 and earlier stores the passwords for (1) exec and (2) enable in cleartext in the NVRAM and a configuration file, which could allow unauthorized users to obtain the passwords and gain…
CVE-2001-1065, published 2001-08-31. Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days. Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap binds itself to port 80 even when web-based configuration services are disabled, which could leave the…
CVE-2001-0444, published 2001-07-02. Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days. Cisco CBOS 2.3.0.053 sends output of the "sh nat" (aka "show nat") command to the terminal of the next user who attempts to connect to the router via telnet, which could allow that user to obtain…