Cisco Ciscoworks CD1 vulnerabilities

3 CVEs affecting Cisco Ciscoworks CD1, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-0356, published 2005-05-31.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2005-0356, published 2005-05-31. Medium severity, CVSS 5.0. EPSS: 82.8% chance of exploitation in the next 30 days. Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a…
• CVE-2003-0731, published 2003-10-20. High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days. CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly…
• CVE-2003-0732, published 2003-10-20. High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days. CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the…