Cisco Enterprise Content Delivery Network Software vulnerabilities

5 CVEs affecting Cisco Enterprise Content Delivery Network Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-3444, published 2013-08-01.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2003-0982, published 2004-01-05. High severity, CVSS 7.5. EPSS: 4.4% chance of exploitation in the next 30 days. Buffer overflow in the authentication module for Cisco ACNS 4.x before 4.2.11, and 5.x before 5.0.5, allows remote attackers to execute arbitrary code via a long password.
• CVE-2013-3444, published 2013-08-01. High severity, CVSS 9.0. EPSS: 4.2% chance of exploitation in the next 30 days. The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before…
• CVE-2005-0598, published 2005-02-24. Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days. The RealServer RealSubscriber on Cisco devices running Application and Content Networking System (ACNS) 5.1 allow remote attackers to cause a denial of service (CPU consumption) via malformed packets.
• CVE-2005-0600, published 2005-02-24. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Cisco devices running Application and Content Networking System (ACNS) 5.0, 5.1 before 5.1.13.7, or 5.2 before 5.2.3.9 allow remote attackers to cause a denial of service (bandwidth consumption) via…
• CVE-2002-0778, published 2002-08-12. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP.