CVE-2001-1064
CVE-2001-1064 is a medium-severity vulnerability in Cisco Cbos with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 5% (92nd percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Cisco Cbos
- Published:
- Last modified:
Description
Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the (1) HTTP or (2) telnet service, which causes the router to become unresponsive and stop forwarding packets.
Frequently asked questions
- What is CVE-2001-1064?
- Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the (1) HTTP or (2) telnet service, which causes the router to become unresponsive and stop forwarding packets.
- How severe is CVE-2001-1064?
- CVE-2001-1064 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2001-1064 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 5% (92nd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2001-1064?
- CVE-2001-1064 primarily affects Cisco Cbos. In total, 15 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2001-1064?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2001-1064 published?
- CVE-2001-1064 was published on 2001-08-31 and last updated on 2026-06-16.
References
- http://www.cisco.com/warp/public/707/cisco-cbos-webserver-pub.shtml
- http://www.securityfocus.com/bid/3236
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7025
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7026
Affected products (15)
- cpe:2.3:o:cisco:cbos:*:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:cbos:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:cbos:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:cbos:2.1.0a:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:cbos:2.2.0:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:cbos:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:cbos:2.2.1a:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:cbos:2.3:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:cbos:2.3.2:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:cbos:2.3.5:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:cbos:2.3.7:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:cbos:2.3.8:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:cbos:2.3.9:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:cbos:2.4.1:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:cbos:2.4.2:*:*:*:*:*:*:*
More vulnerabilities in Cisco Cbos
- CVE-2001-0753 — High (CVSS 7.5): Cisco CBOS 2.3.8 and earlier stores the passwords for (1) exec and (2) enable in cleartext in the NVRAM and a…
- CVE-2001-0751 — High (CVSS 7.5): Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which…
- CVE-2007-4430 — Medium (CVSS 5.0): Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of…
- CVE-2002-0886 — Medium (CVSS 5.0): Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or…
- CVE-2001-0754 — Medium (CVSS 5.0): Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY…
- CVE-2001-0752 — Medium (CVSS 5.0): Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an ICMP ECHO REQUEST (ping) with…