cbr-8 Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/cbr-8/ Sun, 26 Feb 2023 06:41:14 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png cbr-8 Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/cbr-8/ 32 32 CVE-2020-3526 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3526/ Sun, 26 Feb 2023 06:41:14 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3526/ A vulnerability in the Common Open Policy Service (COPS) engine of Cisco IOS XE Software on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to crash a device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a malformed COPS message to the device. A […]

The post CVE-2020-3526 appeared first on CVE Vulnerability.

]]> A vulnerability in the Common Open Policy Service (COPS) engine of Cisco IOS XE Software on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to crash a device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a malformed COPS message to the device. A successful exploit could allow the attacker to crash the device.

The post CVE-2020-3526 appeared first on CVE Vulnerability.

]]> CVE-2020-3509 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3509/ Sun, 26 Feb 2023 06:41:11 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3509/ A vulnerability in the DHCP message handler of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the supervisor to crash, which could result in a denial of service (DoS) condition. The vulnerability is due to insufficient error handling when DHCP version 4 (DHCPv4) messages are […]

The post CVE-2020-3509 appeared first on CVE Vulnerability.

]]> A vulnerability in the DHCP message handler of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the supervisor to crash, which could result in a denial of service (DoS) condition. The vulnerability is due to insufficient error handling when DHCP version 4 (DHCPv4) messages are parsed. An attacker could exploit this vulnerability by sending a malicious DHCPv4 message to or through a WAN interface of an affected device. A successful exploit could allow the attacker to cause a reload of the affected device. Note: On Cisco cBR-8 Converged Broadband Routers, all of the following are considered WAN interfaces: 10 Gbps Ethernet interfaces 100 Gbps Ethernet interfaces Port channel interfaces that include multiple 10 and/or 100 Gbps Ethernet interfaces

The post CVE-2020-3509 appeared first on CVE Vulnerability.

]]> CVE-2021-1622 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-1622/ Thu, 23 Feb 2023 14:06:31 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-1622/ A vulnerability in the Common Open Policy Service (COPS) of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause resource exhaustion, resulting in a denial of service (DoS) condition. This vulnerability is due to a deadlock condition in the code when processing COPS packets under certain […]

The post CVE-2021-1622 appeared first on CVE Vulnerability.

]]> A vulnerability in the Common Open Policy Service (COPS) of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause resource exhaustion, resulting in a denial of service (DoS) condition. This vulnerability is due to a deadlock condition in the code when processing COPS packets under certain conditions. An attacker could exploit this vulnerability by sending COPS packets with high burst rates to an affected device. A successful exploit could allow the attacker to cause the CPU to consume excessive resources, which prevents other control plane processes from obtaining resources and results in a DoS.

The post CVE-2021-1622 appeared first on CVE Vulnerability.

]]> CVE-2021-1623 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-1623/ Thu, 23 Feb 2023 14:06:31 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-1623/ A vulnerability in the Simple Network Management Protocol (SNMP) punt handling function of Cisco cBR-8 Converged Broadband Routers could allow an authenticated, remote attacker to overload a device punt path, resulting in a denial of service (DoS) condition. This vulnerability is due to the punt path being overwhelmed by large quantities of SNMP requests. An […]

The post CVE-2021-1623 appeared first on CVE Vulnerability.

]]> A vulnerability in the Simple Network Management Protocol (SNMP) punt handling function of Cisco cBR-8 Converged Broadband Routers could allow an authenticated, remote attacker to overload a device punt path, resulting in a denial of service (DoS) condition. This vulnerability is due to the punt path being overwhelmed by large quantities of SNMP requests. An attacker could exploit this vulnerability by sending a large number of SNMP requests to an affected device. A successful exploit could allow the attacker to overload the device punt path, resulting in a DoS condition.

The post CVE-2021-1623 appeared first on CVE Vulnerability.

]]>