High severity · published Nov 15, 2024
CVE-2023-20125
Cisco BroadWorks Network Server TCP Denial of Service Vulnerability
8.6
CVSS
1%
EPSS
No
On KEV
Description
A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition.
This vulnerability exists because rate limiting does not occur for certain incoming TCP connections. An attacker could exploit this vulnerability by sending a high rate of TCP connections to the server. A successful exploit could allow the attacker to cause TCP connection resources to grow rapidly until the Cisco BroadWorks Network Server becomes unusable.
Note: To recover from this vulnerability, either Cisco BroadWorks Network Server software must be restarted or the Cisco BroadWorks Network Server node must be rebooted. For more information, see the section of this advisory.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CB
Cisco BroadWorks · Cisco
22.0; 23.0; RI.2021.02; 23.0 ap380391; 23.0 ap380396; RI.2021.08; +34 more · source: vendor
BN
Broadworks Network Server · Cisco
22.0; 23.0; ri.2021.02; 23.0_ap380391; 23.0_ap380396; ri.2021.08; +34 more · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-20125
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-20125
sec.cloudapps.cisco.com
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-tcp-dos-KEdJCxLs
More from Cisco BroadWorks
8.8
CVE-2022-20958
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an unauthenticated, remote attacker to perform a server-side request…
7.5
CVE-2026-20320
A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an…
7.5
CVE-2025-20165
Cisco BroadWorks SIP Denial of Service Vulnerability
6.5
CVE-2026-76438
Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability
6.5
CVE-2022-20951
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an authenticated, remote attacker to perform a server-side request…
