Cisco Content Services Switch 11500 vulnerabilities

10 CVEs affecting Cisco Content Services Switch 11500, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-2629, published 2010-07-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-0356, published 2005-05-31. Medium severity, CVSS 5.0. EPSS: 82.8% chance of exploitation in the next 30 days. Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a…
CVE-2004-0112, published 2004-11-23. Medium severity, CVSS 5.0. EPSS: 10.4% chance of exploitation in the next 30 days. The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote…
CVE-2004-0079, published 2004-11-23. High severity, CVSS 7.5. EPSS: 9.5% chance of exploitation in the next 30 days. The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null…
CVE-2004-0081, published 2004-11-23. Medium severity, CVSS 5.0. EPSS: 7.2% chance of exploitation in the next 30 days. OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test…
CVE-2003-1132, published 2003-12-31. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. The DNS server for Cisco Content Service Switch (CSS) 11000 and 11500, when prompted for a nonexistent AAAA record, responds with response code 3 (NXDOMAIN or "Name Error") instead of response code 0…
CVE-2006-1631, published 2006-04-05. Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the HTTP compression functionality in Cisco CSS 11500 Series Content Services switches allows remote attackers to cause a denial of service (device reload) via (1)…
CVE-2010-1576, published 2010-07-06. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. The Cisco Content Services Switch (CSS) 11500 with software before 8.20.4.02 and the Application Control Engine (ACE) 4710 with software before A2(3.0) do not properly handle use of LF, CR, and LFCR…
CVE-2010-1575, published 2010-07-06. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. The Cisco Content Services Switch (CSS) 11500 with software 08.20.1.01 conveys authentication data through ClientCert-* headers but does not delete client-supplied ClientCert-* headers, which might…
CVE-2010-2629, published 2010-07-06. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. The Cisco Content Services Switch (CSS) 11500 with software 8.20.4.02 and the Application Control Engine (ACE) 4710 with software A2(3.0) do not properly handle LF header terminators in situations…
CVE-2005-3426, published 2005-11-02. Medium severity, CVSS 5.0. EPSS: 1% chance of exploitation in the next 30 days. Cisco CSS 11500 Content Services Switch (CSS) with SSL termination services allows remote attackers to cause a denial of service (memory corruption and device reload) via a malformed client…