CVE-2006-4352
CVE-2006-4352 is a medium-severity vulnerability in Cisco Content Services Switch 11000 with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 1% (66th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Cisco Content Services Switch 11000
- Published:
- Last modified:
Description
The ArrowPoint cookie functionality for Cisco 11000 series Content Service Switches specifies an internal IP address if the administrator does not specify a string option, which allows remote attackers to obtain sensitive information.
Frequently asked questions
- What is CVE-2006-4352?
- The ArrowPoint cookie functionality for Cisco 11000 series Content Service Switches specifies an internal IP address if the administrator does not specify a string option, which allows remote attackers to obtain sensitive information.
- How severe is CVE-2006-4352?
- CVE-2006-4352 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2006-4352 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (66th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2006-4352?
- CVE-2006-4352 affects Cisco Content Services Switch 11000. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2006-4352?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2006-4352 published?
- CVE-2006-4352 was published on 2006-08-25 and last updated on 2026-06-16.
References
Affected products (1)
- cpe:2.3:h:cisco:content_services_switch_11000:*:*:*:*:*:*:*:*
More vulnerabilities in Cisco Content Services Switch 11000
- CVE-2002-0870 — High (CVSS 7.5): The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability…
- CVE-2001-0622 — High (CVSS 7.5): The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s…
- CVE-2001-0621 — High (CVSS 7.5): The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an…
- CVE-2005-0356 — Medium (CVSS 5.0): Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled…
- CVE-2004-0352 — Medium (CVSS 5.0): Cisco 11000 Series Content Services Switches (CSS) running WebNS 5.0(x) before 05.0(04.07)S, and 6.10(x) before…
- CVE-2003-1132 — Medium (CVSS 5.0): The DNS server for Cisco Content Service Switch (CSS) 11000 and 11500, when prompted for a nonexistent AAAA record,…