TI-2001-00722 Aliases CVE-2001-0751 GHSA-v59f-9wq8-3hgg

Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial…

LOW 38Published 2002-03-09 · Updated 2024-08-08

Key facts

Attack vector: Network
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: Partial · Partial · Partial
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which allows remote attackers to spoof or hijack TCP connections.

Why it matters now

EPSS 0.02594 85th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:o:cisco:cbos::::::::	up to 2.3.8	Vulnerable	Cisco

cpe:2.3:o:cisco:cbos:*:*:*:*:*:*:*:* Versions up to 2.3.8 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2001-0751
2026-10-03 Alias added: GHSA-v59f-9wq8-3hgg

References

Patch 1

20010522 More Multiple Vulnerabilities in CBOS

TI-2007-04290 Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent… CVSS 2.0MEDIUM 5.0
TI-2001-00724 Cisco CBOS 2.3.8 and earlier stores the passwords for (1) exec and (2) enable in… CVSS 2.0HIGH 7.5
TI-2002-00860 Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a… CVSS 2.0MEDIUM 5.0
TI-2001-01019 Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to… CVSS 2.0MEDIUM 5.0
TI-2001-00723 Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an… CVSS 2.0MEDIUM 5.0
TI-2001-01020 Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through… CVSS 2.0MEDIUM 5.0

See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences