Skip to content
fr Sign in
8.6 High

CVE-2023-20125 A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote…

Description

A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition. This vulnerability exists because rate limiting does not occur for certain incoming TCP connections. An attacker could exploit this vulnerability by sending a high rate of TCP connections to the server. A successful exploit could allow the attacker to cause TCP connection resources to grow rapidly until the Cisco BroadWorks Network Server becomes unusable. Note: To recover from this vulnerability, either Cisco BroadWorks Network Server software must be restarted or the Cisco BroadWorks Network Server node must be rebooted. For more information, see the section of this advisory. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Affected products and versions

Product Affected versions Fixed in
Cisco BroadWorks 23.0 No fix stated
Cisco BroadWorks 22.0 No fix stated
broadworks_network_server 23.0 No fix stated
broadworks_network_server 22.0 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco BroadWorks

The 21 CVEs of Cisco BroadWorks →
CVE-2026-76438 A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow… 6.5 Medium CVE-2026-20320 A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote… 7.5 High CVE-2025-20307 A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow… 4.8 Medium CVE-2025-20211 A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform could allow an… 6.1 Medium
Track this CVE