CVE-2002-0778: Cisco Cache Engine 505

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP.

Affected products

• Cisco Cache Engine 505: version 2.4.0 only; version 3.0 only
• Cisco Cache Engine 550: any version; version 2.2.0 only; version 2.4.0 only; version 3.0 only
• Cisco Cache Engine 570: version 2.2.0 only; version 2.4.0 only; version 3.0 only; version 570 only
• Cisco Content Distribution Manager 4630: any version; version 4.0 only; version 4.1 only
• Cisco Content Distribution Manager 4650: any version; version 4.0 only; version 4.1 only
• Cisco Content Engine: version 507 only; version 507_2.2.0 only; version 507_3.1 only; version 507_4.0 only; version 507_4.1 only; version 560 only; …
• Cisco Content Router 4430: any version
• Cisco Enterprise Content Delivery Network Software: version 4.0 only; version 4.1 only

Published 2002-08-12. Last modified 2026-06-16.