cisco content services switch vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

Cisco 11000 Series Content Services Switches (CSS) running WebNS 5.0(x) prior to 05.0(04.07)S, and 6.10(x) prior to 06.10(02.05)S allow remote malicious users to cause a denial of service (device reset) via a malformed packet to UDP port 5002.

Cisco Content Services Switch 11800 Cisco Content Services Switch 11000 Cisco Content Services Switch 11050 Cisco Content Services Switch 11150

7.2

CVSSv2

Cisco Content Services (CSS) switch products 11800 and previous versions, aka Arrowpoint, allows local users to gain privileges by entering debug mode.

Cisco Content Services Switch 11800 Cisco Content Services Switch 11050 Cisco Content Services Switch 11150

7.5

CVSSv2

The Cisco Content Services Switch (CSS) 11500 with software prior to 8.20.4.02 and the Application Control Engine (ACE) 4710 with software before A2(3.0) do not properly handle use of LF, CR, and LFCR as alternatives to the standard CRLF sequence between HTTP headers, which allow...

Cisco Content Services Switch 11500 8.20.0.01 Cisco Content Services Switch 11500 08.20.1.01 Cisco Content Services Switch 11500 Cisco Content Services Switch 11500 8.20.2.01 Cisco Content Services Switch 11500 8.20.1.01 Cisco Ace 4710 A1\\(8.0\\)Cisco Ace 4710 A1\\(2.0\\)Cisco Ace 4710

7.5

CVSSv2

The Cisco Content Services Switch (CSS) 11500 with software 8.20.4.02 and the Application Control Engine (ACE) 4710 with software A2(3.0) do not properly handle LF header terminators in situations where the GET line is terminated by CRLF, which allows remote malicious users to co...

Cisco Content Services Switch 11500 08.20.1.01 Cisco Content Services Switch 11500 8.20.1.01 Cisco Content Services Switch 11500 8.20.0.01 Cisco Content Services Switch 11500 Cisco Content Services Switch 11500 8.20.2.01 Cisco Ace 4710 A1\\(8.0\\)Cisco Ace 4710 A1\\(2.0\\)Cisco Ace 4710

5

CVSSv2

The DNS server for Cisco Content Service Switch (CSS) 11000 and 11500, when prompted for a nonexistent AAAA record, responds with response code 3 (NXDOMAIN or "Name Error") instead of response code 0 ("No Error"), which allows remote malicious users to cause a...

Cisco Content Services Switch 11000 Cisco Content Services Switch 11500

2.1

CVSSv2

Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to the "show script," "clear script," "show archive," "clear archive," "show log," or "clear log" comman...

Cisco Arrowpoint Cisco Content Services Switch

2.1

CVSSv2

Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to read arbitrary files via a .. (dot dot) attack.

Cisco Content Services Switch Cisco Arrowpoint

5

CVSSv2

Cisco CSS 11500 Content Services Switch (CSS) with SSL termination services allows remote malicious users to cause a denial of service (memory corruption and device reload) via a malformed client certificate during SSL session negotiation.

Cisco Content Services Switch 11500

5

CVSSv2

The ArrowPoint cookie functionality for Cisco 11000 series Content Service Switches specifies an internal IP address if the administrator does not specify a string option, which allows remote malicious users to obtain sensitive information.

Cisco Content Services Switch 11000

7.5

CVSSv2

The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and write arbitrary files via GET or PUT commands.

Cisco Content Services Switch 11000

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook