CVE Feed

    Dashboard / CVE / CVE-2002-0870

    CVE-2002-0870

    The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability (CVE-2001-0622) was incomplete, which still allows remote attackers to gain additional privileges by directly requesting the web management URL instead of navigating through the interface, possibly via a variant of the original attack, as identified by Cisco bug ID CSCdw08549.

    Published:Aug 20, 2002
    Last Modified:Apr 16, 2026
    EPS:Aug 20, 2002
    EPSS Score:0.00455
    CVSS Score:7.5

    Affected Products

    Vendor
    Cisco
    Product
    Content Services Switch 11000
    Vendor
    Cisco
    Product
    Webns

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2007-4654 (CVSS 5) — Unspecified vulnerability in SSHield 1.6.1 with OpenSSH 3.0.2p1 on Cisco WebNS 8.20.0.1 on Cisco Content Servi…
    CVE-2006-4352 (CVSS 5) — The ArrowPoint cookie functionality for Cisco 11000 series Content Service Switches specifies an internal IP a…
    CVE-2005-0356 (CVSS 5) — Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps optio…
    CVE-2004-0352 (CVSS 5) — Cisco 11000 Series Content Services Switches (CSS) running WebNS 5.0(x) before 05.0(04.07)S, and 6.10(x) befor…
    CVE-2003-1132 (CVSS 5) — The DNS server for Cisco Content Service Switch (CSS) 11000 and 11500, when prompted for a nonexistent AAAA re…
    CVE-2002-0792 (CVSS 5) — The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to …
    CVE-2001-0621 (CVSS 7.5) — The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s a…
    CVE-2001-0622 (CVSS 7.5) — The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High