EIP-2026-103877
PRE-CVEBroadWorks - Call Detail Record Security Bypass
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-103877. PoCs published by Nick Freeman.
AI-analyzed exploit summary This Python script acts as a proxy to intercept and modify BroadWorks CAP protocol traffic, allowing an attacker to bypass security restrictions and monitor calls of users in other enterprise groups. It automates the injection of monitoring requests by modifying XML payloads to exploit a security-bypass vulnerability in BroadWorks versions R16 and prior.
Description
BroadWorks - Call Detail Record Security Bypass
Exploits (1)
This Python script acts as a proxy to intercept and modify BroadWorks CAP protocol traffic, allowing an attacker to bypass security restrictions and monitor calls of users in other enterprise groups. It automates the injection of monitoring requests by modifying XML payloads to exploit a security-bypass vulnerability in BroadWorks versions R16 and prior.