Read the docs
TI-2002-00860 Aliases CVE-2002-0886GHSA-32p2-76xv-rj3g

Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a…

Priority LOW 31Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memory consumption) via (1) a large packet to the DHCP port, (2) a large packet to the Telnet port, or (3) a flood of large packets to the CPE, which causes the TCP/IP stack to consume large amounts of memory.

Why it matters now

EPSS 0.0537 92nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 21

CPEVersionsRoleVendor
cpe:2.3:o:cisco:cbos:2.0.1:*:*:*:*:*:*:*2.0.1VulnerableCisco
cpe:2.3:o:cisco:cbos:2.1.0:*:*:*:*:*:*:*2.1.0VulnerableCisco
cpe:2.3:o:cisco:cbos:2.1.0a:*:*:*:*:*:*:*2.1.0aVulnerableCisco
cpe:2.3:o:cisco:cbos:2.2.0:*:*:*:*:*:*:*2.2.0VulnerableCisco
cpe:2.3:o:cisco:cbos:2.2.1:*:*:*:*:*:*:*2.2.1VulnerableCisco
cpe:2.3:o:cisco:cbos:2.2.1a:*:*:*:*:*:*:*2.2.1aVulnerableCisco
cpe:2.3:o:cisco:cbos:2.3:*:*:*:*:*:*:*2.3VulnerableCisco
cpe:2.3:o:cisco:cbos:2.3.2:*:*:*:*:*:*:*2.3.2VulnerableCisco
cpe:2.3:o:cisco:cbos:2.3.5:*:*:*:*:*:*:*2.3.5VulnerableCisco
cpe:2.3:o:cisco:cbos:2.3.5.015:*:*:*:*:*:*:*2.3.5.015VulnerableCisco
  • cpe:2.3:o:cisco:cbos:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:cbos:2.1.0:*:*:*:*:*:*:* Versions 2.1.0 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:cbos:2.1.0a:*:*:*:*:*:*:* Versions 2.1.0a Vulnerable ·Cisco
  • cpe:2.3:o:cisco:cbos:2.2.0:*:*:*:*:*:*:* Versions 2.2.0 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:cbos:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:cbos:2.2.1a:*:*:*:*:*:*:* Versions 2.2.1a Vulnerable ·Cisco
  • cpe:2.3:o:cisco:cbos:2.3:*:*:*:*:*:*:* Versions 2.3 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:cbos:2.3.2:*:*:*:*:*:*:* Versions 2.3.2 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:cbos:2.3.5:*:*:*:*:*:*:* Versions 2.3.5 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:cbos:2.3.5.015:*:*:*:*:*:*:* Versions 2.3.5.015 Vulnerable ·Cisco
Show 11 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:cisco:cbos:2.3.7:*:*:*:*:*:*:*2.3.7VulnerableCisco
cpe:2.3:o:cisco:cbos:2.3.7.002:*:*:*:*:*:*:*2.3.7.002VulnerableCisco
cpe:2.3:o:cisco:cbos:2.3.8:*:*:*:*:*:*:*2.3.8VulnerableCisco
cpe:2.3:o:cisco:cbos:2.3.9:*:*:*:*:*:*:*2.3.9VulnerableCisco
cpe:2.3:o:cisco:cbos:2.3_.053:*:*:*:*:*:*:*2.3_.053VulnerableCisco
cpe:2.3:o:cisco:cbos:2.4.1:*:*:*:*:*:*:*2.4.1VulnerableCisco
cpe:2.3:o:cisco:cbos:2.4.2:*:*:*:*:*:*:*2.4.2VulnerableCisco
cpe:2.3:o:cisco:cbos:2.4.2ap:*:*:*:*:*:*:*2.4.2apVulnerableCisco
cpe:2.3:o:cisco:cbos:2.4.2b:*:*:*:*:*:*:*2.4.2bVulnerableCisco
cpe:2.3:o:cisco:cbos:2.4.3:*:*:*:*:*:*:*2.4.3VulnerableCisco
cpe:2.3:o:cisco:cbos:2.4.4:*:*:*:*:*:*:*2.4.4VulnerableCisco
  • cpe:2.3:o:cisco:cbos:2.3.7:*:*:*:*:*:*:* Versions 2.3.7 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:cbos:2.3.7.002:*:*:*:*:*:*:* Versions 2.3.7.002 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:cbos:2.3.8:*:*:*:*:*:*:* Versions 2.3.8 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:cbos:2.3.9:*:*:*:*:*:*:* Versions 2.3.9 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:cbos:2.3_.053:*:*:*:*:*:*:* Versions 2.3_.053 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:cbos:2.4.1:*:*:*:*:*:*:* Versions 2.4.1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:cbos:2.4.2:*:*:*:*:*:*:* Versions 2.4.2 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:cbos:2.4.2ap:*:*:*:*:*:*:* Versions 2.4.2ap Vulnerable ·Cisco
  • cpe:2.3:o:cisco:cbos:2.4.2b:*:*:*:*:*:*:* Versions 2.4.2b Vulnerable ·Cisco
  • cpe:2.3:o:cisco:cbos:2.4.3:*:*:*:*:*:*:* Versions 2.4.3 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:cbos:2.4.4:*:*:*:*:*:*:* Versions 2.4.4 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2002-0886
  2. 2026-10-03 Alias added: GHSA-32p2-76xv-rj3g

References

Patch 1

Advisory 1

Other 1

  • TI-2001-00722 Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial… CVSS 2.0HIGH 7.5
  • TI-2007-04290 Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent… CVSS 2.0MEDIUM 5.0
  • TI-2001-00724 Cisco CBOS 2.3.8 and earlier stores the passwords for (1) exec and (2) enable in… CVSS 2.0HIGH 7.5
  • TI-2001-01019 Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to… CVSS 2.0MEDIUM 5.0
  • TI-2001-00723 Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an… CVSS 2.0MEDIUM 5.0
  • TI-2001-01020 Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through… CVSS 2.0MEDIUM 5.0
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences