CVE-2023-20125

Summary

CVE-2023-20125 is a newly disclosed vulnerability affecting the local interface of Cisco BroadWorks Network Server. This issue permits unauthenticated, remote attackers to cause a denial of service (DoS) condition by exhausting system resources. The vulnerability stems from insufficient rate limiting for certain incoming TCP connections. An attacker can exploit this flaw by overwhelming the server with a high volume of TCP connections, leading to a rapid consumption of resources. To mitigate the impact of this vulnerability, users must either restart the Cisco BroadWorks Network Server software or reboot the affected node. Cisco has released software updates to address this issue, and no workarounds are currently available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.