Cisco Content Services Switch vulnerabilities

2 CVEs affecting Cisco Content Services Switch, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2001-0020, published 2001-02-12.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2001-0020, published 2001-02-12. Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days. Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to read arbitrary files via a .. (dot dot) attack.
• CVE-2001-0019, published 2001-02-12. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to the "show script," "clear script," "show archive," "clear archive," "show log,"…