Description
A vulnerability in the Device Management Servlet application of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to improper input validation when parsing HTTP requests. An attacker could exploit this vulnerability by sending a sustained stream of crafted requests to an affected device. A successful exploit could allow the attacker to cause all subsequent requests to be dropped, resulting in a DoS condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cisco | Cisco BroadWorks | 23.0, 23.0 ap380391, 23.0 ap380396, 23.0 ap379795, 23.0 ap373098, 23.0 ap382864, 23.0 ap382358, 23.0 ap382281, 23.0 ap367434, 23.0 ap376661, 23.0 ap380691, 23.0 ap383569, 23.0 ap375601, 23.0 ap372017, 23.0 ap383519, 23.0 ap375345, 23.0 ap371300, 23.0 ap383785, 23.0 ap380771, 23.0 ap351263, 23.0 ap3… | — |