Tech Analysis research archive

Tech Analysis discovers denial of service vulnerability in the Cisco DPQ3925 wireless residential gateway, CVE-2016-1326

Originally published on techanalysis.com.au by Tech Analysis on 1 September 2016 under the title "Discovered a denial of service (DoS) vulnerability in the Cisco DPQ3925 8x4 DOCSIS 3.0 Wireless Residential Gateway used by Optus and Telstra - CVE-2016-1326"; first archived by the Internet Archive on 2 January 2017. This page is a 11 October 2026 summary written to preserve the address and the record, not the original article text.

Tech Analysis is no longer trading. This website is maintained as the personal profile and research archive of its founder, Chris Watts, who now works at CyberCX. Earlier research remains attributed to Tech Analysis as originally published.

What was reported

On 9 March 2016 Cisco published an advisory for a denial of service vulnerability in the Cisco Model DPQ3925 8x4 DOCSIS 3.0 Wireless Residential Gateway with EDVA, assigned CVE-2016-1326. In Cisco's words, the flaw could allow an unauthenticated, remote attacker to cause the device to become unresponsive and restart by sending crafted HTTP requests to interfaces with management enabled. Cisco gave it a CVSS v2 base score of 7.8. This CVE should not be confused with CVE-2016-1325, a different issue credited to another researcher that appeared in the same week's reporting.

Tech Analysis announced the finding on this page on 1 September 2016.

Primary sources

Attribution

Cisco's advisory states: "Cisco would like to thank Chris Watts of Tech Analysis for reporting this vulnerability."

See the full research index for all public vulnerability records credited to Chris Watts.