Cbos

Vendor:

First CVE: Jul 2, 2001 · Active for 25 years

9
Total CVEs
More Total CVEs than 86% of tracked products
3.0
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
5.2
Avg CVSS
Higher Avg CVSS than 9% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Cbos over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jul 2, 2001
25 years ago
Most Recent CVE
Aug 20, 2007
6,914 days ago

CVE Severity & Scoring

Cbos9 CVEs
All CVEs352,427 CVEs
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown9 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown9 (100.0%)
User Interaction
None0 (0.0%)
Unknown9 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown9 (100.0%)

Top CVEs

Signals from CVEs in this product scope (9 CVEs).

9 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service (device restart and BGP routing table rebuild) via certain
Aug 20, 20075.034NOYES
Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memory consumption) via (1) a large packet to the DHCP port, (2)
Oct 4, 20025.029NOYES
Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which allows remote attackers to spoof or hijack TCP connections.
Oct 18, 20017.529NOYES
Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the (1) HTTP or (2) telne
Aug 31, 20015.024NOYES
Cisco CBOS 2.3.8 and earlier stores the passwords for (1) exec and (2) enable in cleartext in the NVRAM and a configuration file, which could allow unauthorized users to obtain the
Oct 18, 20017.519NONO
Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY (ping) packets, which cause it to enter ROMMON mode and stop
Oct 18, 20015.019NONO
Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an ICMP ECHO REQUEST (ping) with the IP Record Route option set.
Oct 18, 20015.015NONO
Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap binds itself to port 80 even when web-based configuration services are disabled, whic
Aug 31, 20015.015NONO
Cisco CBOS 2.3.0.053 sends output of the "sh nat" (aka "show nat") command to the terminal of the next user who attempts to connect to the router via telnet, which could allow that
Jul 2, 20012.111NONO

Exploit Exposure

Signals from CVEs in this product scope (9 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
4 CVEs
44.4% of CVEs· 91st percentile

Social Chatter

Signals from CVEs in this product scope (9 CVEs).

Media Mentions

Signals from CVEs in this product scope (9 CVEs).

Top CNAs Publishing CVEs For Cbos

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
2.4.415.05.4%01
2.4.315.05.4%01
2.4.2b15.05.4%01
2.4.2ap15.05.4%01
2.4.225.05.4%02
2.4.134.03.7%02
2.3.925.05.4%02
2.3.825.05.4%02
2.3.7.00215.05.4%01
2.3.725.05.4%02
2.3.5.01515.05.4%01
2.3.525.05.4%02
2.3.225.05.4%02
2.3.05312.10.5%00
2.3_.05315.05.4%01
2.325.05.4%02
2.2.1a25.05.4%02
2.2.125.05.4%02
2.2.025.05.4%02
2.1.0a25.05.4%02