CVE-2002-0886: Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (...

Security readout for executives and security teams

This is an old denial-of-service issue in Cisco DSL customer-premises equipment running CBOS 2.4.4 or earlier. A remote attacker could make the device hang or consume memory by sending oversized traffic to DHCP, Telnet, or by flooding it with large packets. The business impact is loss of connectivity, not data theft based on the provided sources. Exposure is most likely in legacy Cisco DSL CPE still running CBOS 2.4.4 or earlier, especially if reachable from untrusted networks. Modern environments are unlikely to be affected unless old DSL edge equipment remains in service. Treat this as a legacy availability risk. It is unlikely to drive emergency enterprise response without affected devices, but any confirmed exposed CBOS 2.4.4-or-earlier CPE should be prioritized because disruption could affect branch connectivity. Mitigation focus: Inventory Cisco DSL CPE devices and identify any running CBOS 2.4.4 or earlier.; Review Cisco advisory guidance for supported upgrades, configuration changes, or replacement direction.; Limit untrusted reachability to Telnet and DHCP services where operationally possible..

Prepared

Jul 1, 2026, 06:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.