CVE-2021-1622

A vulnerability in the Common Open Policy Service (COPS) of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause resource exhaustion, resulting in a denial of service (DoS) condition. This vulnerability is due to a deadlock condition in the code when processing COPS packets under certain conditions. An attacker could exploit this vulnerability by sending COPS packets with high burst rates to an affected device. A successful exploit could allow the attacker to cause the CPU to consume excessive resources, which prevents other control plane processes from obtaining resources and results in a DoS.

• CWE-833
• CWE-667

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cbr8-cops-Vc2ZsJSxPatch, Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cbr8-cops-Vc2ZsJSxPatch, Vendor Advisory

Published

Sep 23, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1616A vulnerability in the H.323 application level gateway (ALG)…4.7
• CVE-2021-1617Multiple vulnerabilities in the web-based management interfa…6.5
• CVE-2021-1618Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2021-1619A vulnerability in the authentication, authorization, and ac…9.1
• CVE-2021-1620A vulnerability in the Internet Key Exchange Version 2 (IKEv…7.7
• CVE-2021-1621A vulnerability in the Layer 2 punt code of Cisco IOS XE Sof…7.4
• CVE-2021-1623A vulnerability in the Simple Network Management Protocol (S…7.7
• CVE-2021-1624A vulnerability in the Rate Limiting Network Address Transla…8.6
• CVE-2021-1625A vulnerability in the Zone-Based Policy Firewall feature of…5.8
• CVE-2021-1626MuleSoft is aware of a Remote Code Execution vulnerability a…9.8
• CVE-2021-1627MuleSoft is aware of a Server Side Request Forgery vulnerabi…9.8
• CVE-2021-1628MuleSoft is aware of a XML External Entity (XXE) vulnerabili…9.8