Vulnerability in Cisco Content Services Switch 11000

CVE-2002-0870

The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability (CVE-2001-0622) was incomplete, which still allows remote attackers to gain additional privileges by directly requesting the web management URL instead of navigating through the interface, possibly via a variant of the original attack, as identified by Cisco bug ID CSCdw08549.

EPSS: 0.015 (72.5th percentile) — read the EPSS interpretation.

Affected products

References

  • cve@mitre.org (x_refsource_CISCO, vendor-advisory, Vendor Advisory)