The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability (CVE-2001-0622) was incomplete, which still allows remote attackers to gain additional privileges by directly requesting the web management URL instead of navigating through the interface, possibly via a variant of the original attack, as identified by Cisco bug ID CSCdw08549.

Threat-Mapped Scoring

Score: 3.0

Priority: P2 - Serious (High)

• S1 – Steal Customer Account Information

EPSS

Score: 0.00455
Percentile: 0.62914

CVSS Scoring

Affected Products

• cpe:2.3:a:cisco:webns:*:*:*:*:*:*:*:*
• cpe:2.3:h:cisco:content_services_switch_11000:*:*:*:*:*:*:*:*

← Back to Home