CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

The Management Interface on Cisco Content Services Switch CSS 11500 devices 8.20.4.02 and earlier allows remote attackers to bypass intended restrictions on local-network device access via crafted SSH packets, aka Bug ID CSCut14855...

6.8AI score0.01631EPSS

Exploits0References2

Prion•added 2011/01/28 10:0 p.m.•21 views

Design/Logic Flaw

Cisco IOS 12.411MD, 12.415MD, 12.422MD, 12.424MD before 12.424MD3, 12.422MDA before 12.422MDA5, and 12.424MDA before 12.424MDA3 on the Cisco Content Services Gateway Second Generation aka CSG2 allows remote attackers to bypass intended access restrictions and intended billing restrictions by...

6.4CVSS7.2AI score0.02265EPSS

Exploits0References7Affected Software1

CVE•added 2011/01/28 9:13 p.m.•51 views

CVE-2011-0348

CVE-2011-0348 affects Cisco IOS for the CSG2 (CSG2 on 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, and 12.4(24)MD family) and enables a service policy bypass by sending HTTP traffic to a restricted destination after unrestricted HTTP traffic. Root cause is a vulnerability in policy/billing handling on the...

6.4CVSS6.8AI score0.02265EPSS

Exploits0References7Affected Software1

securityvulns•added 2011/01/28 12:0 a.m.•150 views

Cisco Security Advisory: Cisco Content Services Gateway Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Content Services Gateway Vulnerabilities Advisory ID: cisco-sa-20110126-csg2 http://www.cisco.com/warp/public/707/cisco-sa-20110126-csg2.shtml Revision 1.0 For Public Release 2011 January 26 1600 UTC GMT...

7.8CVSS1.1AI score0.04086EPSS

Exploits0

NVD•added 2010/07/06 5:17 p.m.•14 views

CVE-2010-1576

The Cisco Content Services Switch CSS 11500 with software before 8.20.4.02 and the Application Control Engine ACE 4710 with software before A23.0 do not properly handle use of LF, CR, and LFCR as alternatives to the standard CRLF sequence between HTTP headers, which allows remote attackers to...

7.5CVSS6.6AI score0.01834EPSS

Exploits2References6

NVD•added 2010/07/06 5:17 p.m.•15 views

CVE-2010-1575

The Cisco Content Services Switch CSS 11500 with software 08.20.1.01 conveys authentication data through ClientCert- headers but does not delete client-supplied ClientCert- headers, which might allow remote attackers to bypass authentication via crafted header data, as demonstrated by a...

7.5CVSS6.8AI score0.01686EPSS

Exploits2References5

Prion•added 2010/07/06 5:17 p.m.•22 views

Design/Logic Flaw

The Cisco Content Services Switch CSS 11500 with software 8.20.4.02 and the Application Control Engine ACE 4710 with software A23.0 do not properly handle LF header terminators in situations where the GET line is terminated by CRLF, which allows remote attackers to conduct HTTP request smuggling...

7.5CVSS7.3AI score0.01834EPSS

Exploits2References5Affected Software2

Prion•added 2010/07/06 5:17 p.m.•22 views

Crlf injection

7.5CVSS7AI score0.01834EPSS

Exploits2References6Affected Software2

Cvelist•added 2010/07/06 2:0 p.m.•22 views

CVE-2010-1576

6.6AI score0.01834EPSS

Exploits2References6

Prion•added 2007/09/04 10:17 p.m.•40 views

Design/Logic Flaw

Unspecified vulnerability in SSHield 1.6.1 with OpenSSH 3.0.2p1 on Cisco WebNS 8.20.0.1 on Cisco Content Services Switch CSS series 11000 devices allows remote attackers to cause a denial of service connection slot exhaustion and device crash via a series of large packets designed to exploit the...

5CVSS7AI score0.32416EPSS

Exploits1References4Affected Software3

NVD•added 2007/09/04 10:17 p.m.•27 views

CVE-2007-4654

5CVSS6.8AI score0.01958EPSS

Exploits0References4

Cvelist•added 2007/09/04 10:0 p.m.•39 views

CVE-2007-4654

6.8AI score0.01958EPSS

Exploits0References4

securityvulns•added 2005/09/09 12:0 a.m.•23 views

Cisco Content Services Switch authentication bypass