- Description
- A vulnerability in the Device Management Servlet application of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper input validation when parsing HTTP requests. An attacker could exploit this vulnerability by sending a sustained stream of crafted requests to an affected device. A successful exploit could allow the attacker to cause all subsequent requests to be dropped, resulting in a DoS condition.
- Source
- ykramarz@cisco.com
- NVD status
- Modified
CVSS 3.1
- Type
- Primary
- Base score
- 8.6
- Impact score
- 4
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- Severity
- HIGH
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:broadworks_application_delivery_platform_device_management:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CCD081A-1BDE-45A3-AC65-AC2A29BC27A9",
"versionEndExcluding": "2022.11_1.273",
"versionStartIncluding": "22.0"
},
{
"criteria": "cpe:2.3:a:cisco:broadworks_xtended_services_platform:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D80A6C4-1D8A-4EE9-B1F7-B6E37C59DA33",
"versionEndExcluding": "23.0.1075.ap384245",
"versionStartIncluding": "22.0"
}
],
"operator": "OR"
}
]
}
]