CVE-2001-0622
CVE-2001-0622 is a high-severity vulnerability in Cisco Content Services Switch 11000 with a CVSS 2.0 base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: High (CVSS 2.0 base score 7.5)
- EPSS exploit prediction: 2% (73rd percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Cisco Content Services Switch 11000
- Published:
- Last modified:
Description
The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s allows a remote attacker to gain additional privileges by directly requesting the web management URL instead of navigating through the interface.
Frequently asked questions
- What is CVE-2001-0622?
- The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s allows a remote attacker to gain additional privileges by directly requesting the web management URL instead of navigating through the interface.
- How severe is CVE-2001-0622?
- CVE-2001-0622 has a CVSS 2.0 base score of 7.5, rated high severity.
- Is CVE-2001-0622 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (73rd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2001-0622?
- CVE-2001-0622 affects Cisco Content Services Switch 11000. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2001-0622?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2001-0622 published?
- CVE-2001-0622 was published on 2001-08-14 and last updated on 2026-06-16.
References
- http://www.cisco.com/warp/public/707/arrowpoint-webmgmt-vuln-pub.shtml
- http://www.osvdb.org/1848
- http://www.securityfocus.com/bid/2806
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6631
Affected products (1)
- cpe:2.3:h:cisco:content_services_switch_11000:*:*:*:*:*:*:*:*
More vulnerabilities in Cisco Content Services Switch 11000
- CVE-2002-0870 — High (CVSS 7.5): The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability…
- CVE-2001-0621 — High (CVSS 7.5): The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an…
- CVE-2006-4352 — Medium (CVSS 5.0): The ArrowPoint cookie functionality for Cisco 11000 series Content Service Switches specifies an internal IP address if…
- CVE-2005-0356 — Medium (CVSS 5.0): Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled…
- CVE-2004-0352 — Medium (CVSS 5.0): Cisco 11000 Series Content Services Switches (CSS) running WebNS 5.0(x) before 05.0(04.07)S, and 6.10(x) before…
- CVE-2003-1132 — Medium (CVSS 5.0): The DNS server for Cisco Content Service Switch (CSS) 11000 and 11500, when prompted for a nonexistent AAAA record,…