CVE-2023-20216

Cisco BroadWorks has a local-privilege-escalation vulnerability (CVE-2023-20216) due to incorrect implementation of user role permissions. An authenticated attacker with BWORKS or BWSUPERADMIN privileges can issue crafted commands to gain root-level access on any BroadWorks server type. The flaw ...

CVE-2025-20165

CVE-2025-20165 describes a denial-of-service flaw in Cisco BroadWorks’ SIP processing, caused by improper memory handling of certain SIP requests. An unauthenticated, remote attacker can trigger a DoS by sending a high volume of SIP requests, exhausting memory on Cisco BroadWorks Network Servers ...