Cisco Content Services Switch 11000 vulnerabilities

8 CVEs affecting Cisco Content Services Switch 11000, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-4352, published 2006-08-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-0356, published 2005-05-31. Medium severity, CVSS 5.0. EPSS: 82.8% chance of exploitation in the next 30 days. Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a…
CVE-2004-0352, published 2004-11-23. Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days. Cisco 11000 Series Content Services Switches (CSS) running WebNS 5.0(x) before 05.0(04.07)S, and 6.10(x) before 06.10(02.05)S allow remote attackers to cause a denial of service (device reset) via a…
CVE-2002-0792, published 2002-08-12. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a denial of service (soft reset) via (1) an HTTPS POST request, or (2) malformed…
CVE-2003-1132, published 2003-12-31. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. The DNS server for Cisco Content Service Switch (CSS) 11000 and 11500, when prompted for a nonexistent AAAA record, responds with response code 3 (NXDOMAIN or "Name Error") instead of response code 0…
CVE-2001-0622, published 2001-08-14. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s allows a remote attacker to gain additional privileges by directly requesting…
CVE-2002-0870, published 2002-09-05. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability (CVE-2001-0622) was incomplete, which still allows remote attackers to gain additional…
CVE-2001-0621, published 2001-08-14. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and write arbitrary files via GET or PUT…
CVE-2006-4352, published 2006-08-25. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. The ArrowPoint cookie functionality for Cisco 11000 series Content Service Switches specifies an internal IP address if the administrator does not specify a string option, which allows remote…