Denial of Service Vulnerability in Cisco DSL CPE Devices

CVE-2002-0886

Summary

Cisco DSL CPE devices operating with CBOS version 2.4.4 and prior are susceptible to a denial of service vulnerability. By sending a large packet to either the DHCP or Telnet ports, or by flooding the device with large packets, attackers can exploit the TCP/IP stack. This exploitation leads to excessive memory consumption, potentially resulting in the device becoming unresponsive. Organizations using these devices should consider applying the recommended patches and implementing preventive security measures.

References