A vulnerability in the Common Open Policy Service (COPS) of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause resource exhaustion, resulting in a denial of service (DoS) condition. This vulnerability is due to a deadlock condition in the code when processing COPS packets under certain conditions. An attacker could exploit this vulnerability by sending COPS packets with high burst rates to an affected device. A successful exploit could allow the attacker to cause the CPU to consume excessive resources, which prevents other control plane processes from obtaining resources and results in a DoS.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HCisco 7600 Router
HWCiscoall versionsCisco Asr 901 12c F D
HWCiscoall versionsCisco Asr 901 12c Ft D
HWCiscoall versionsCisco Asr 901 4c F D
HWCiscoall versionsCisco Asr 901 4c Ft D
HWCiscoall versionsCisco Asr 901 6cz F A
HWCiscoall versionsCisco Asr 901 6cz F D
HWCiscoall versionsCisco Asr 901 6cz Fs A
HWCiscoall versionsCisco Asr 901 6cz Fs D
HWCiscoall versionsCisco Asr 901 6cz Ft A
HWCiscoall versionsCisco Asr 901 6cz Ft D
HWCiscoall versionsCisco Cbr 8
HWCiscoall versionsCisco IOS XE
OSCisco17.3.1x< 16.12.1z1
Related vulnerabilities
Cisco IOS XE Web UI — nieautoryzowane tworzenie konta z privilege 15
Buffer overflow w QoS Cisco IOS/IOS XE — RCE i DoS przez UDP 18999
Buffer overflow w DHCP relay Cisco IOS — RCE bez uwierzytelnienia
RCE w Cisco IOS/IOS XE – podatność protokołu CMP przez Telnet
Nieprawidłowa kontrola dostępu w Cisco IOS XE Software (CVE-2026-20267)