CVE-2011-1649: Cisco Content Delivery System

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

The Internet Streamer application in Cisco Content Delivery System (CDS) with software 2.5.7, 2.5.8, and 2.5.9 before build 126 allows remote attackers to cause a denial of service (Web Engine crash) via a crafted URL, aka Bug IDs CSCtg67333 and CSCth25341.

Affected products

• Cisco Content Delivery System: version 2.5.7 only; version 2.5.8 only; version 2.5.9 only
• Cisco Content Delivery System Engine

Published 2011-05-31. Last modified 2026-06-16.