CVE-2023-20020

A vulnerability in the Device Management Servlet application of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper input validation when parsing HTTP requests. An attacker could exploit this vulnerability by sending a sustained stream of crafted requests to an affected device. A successful exploit could allow the attacker to cause all subsequent requests to be dropped, resulting in a DoS condition.

• CWE-835
• CWE-20

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-dos-HpkeYzpVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-dos-HpkeYzpVendor Advisory

Published

Jan 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20015A vulnerability in the CLI of Cisco Firepower 4100 Series, C…6.7
• CVE-2023-20016A vulnerability in the backup configuration feature of Cisco…6.5
• CVE-2023-20017Multiple vulnerabilities in Cisco Intersight Private Virtual…9.1
• CVE-2023-20018A vulnerability in the web-based management interface of Cis…6.5
• CVE-2023-20019A vulnerability in the web-based management interface of Cis…6.1
• CVE-2023-2002A vulnerability was found in the HCI sockets implementation …6.8
• CVE-2023-20021Multiple vulnerabilities in specific Cisco Identity Services…6.7
• CVE-2023-20022Multiple vulnerabilities in specific Cisco Identity Services…6.7
• CVE-2023-20023Multiple vulnerabilities in specific Cisco Identity Services…6.7
• CVE-2023-20024Multiple vulnerabilities in the web-based user interface of …7.5
• CVE-2023-20025A vulnerability in the web-based management interface of Cis…9.8
• CVE-2023-20026A vulnerability in the web-based management interface of Cis…7.2