Denial of Service Vulnerability in Cisco BroadWorks Platforms

CVE-2023-20020

Summary

A vulnerability exists in the Device Management Servlet of Cisco BroadWorks platforms that could enable an unauthenticated remote attacker to trigger a denial of service (DoS) condition. This issue arises from inadequate input validation during the handling of HTTP requests. By sending a continuous stream of specifically crafted requests, an attacker could prevent the affected device from processing subsequent requests, effectively causing a DoS situation.

References