Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap binds itself to port 80 even when web-based configuration services are disabled, which could leave the router open to attack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cbos | Cisco | * | 2.4.2ap (including) |
| Cbos | Cisco | 2.0.1 (including) | 2.0.1 (including) |