Cisco BroadWorks vulnerabilities
7 known vulnerabilities in Cisco BroadWorks from Cisco. 7 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Cisco BroadWorks Improper Restriction of XML External Entity Reference Exploited
A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly pa
- 7.5 High severity
Cisco BroadWorks: Memory Allocation with Excessive Size Value
A vulnerability in the SIP processing subsystem of Cisco BroadWorks could allow an unauthenticated, remote attacker to halt the processing of incoming SIP requests, resulting in a denial of service (DoS) condition. This vulnerability is due to improper memory
- 8.6 High severity
Cisco BroadWorks: Uncontrolled Resource Consumption
A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition. This vulnerability exists because rate limiting does not occur f
- 9.8 Critical severity
Cisco BroadWorks: Improper Authentication
A vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to forge the credentials required to access an affected
- 7.8 High severity
Cisco BroadWorks: Incorrect Permission Assignment for Critical Resource
A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authenticated, local attacker to elevate privileges to root on an affected system. This vulnerability is due to incorrect implementation of user role
- 8.6 High severity
A vulnerability in the Device Management Servlet application of Cisco BroadWorks Application…
A vulnerability in the Device Management Servlet application of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an aff
- 8.8 High severity
Cisco BroadWorks: Server-Side Request Forgery
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an unauthenticated, remote attacker to perform a server-side request forgery (SSRF) attack on an affected device. This vulnerability is due to insuffici