Cisco CBOS contains a flaw that may allow a remote denial of service. The issue is triggered when an attacker sends a malicous GET request occurs, and will result in loss of availability for the router.
Upgrade to version 2.3.9 or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround(s):
Disable the web interface by issuing the following line in configuration mode: set web disabled