Unscored severity · published Aug 12, 2002
CVE-2002-0778
The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding…
–
CVSS
1.6%
EPSS
No
On KEV
Description
The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CE
Cache Engine 505 · Cisco
2.4.0; 3.0 · source: NVD
CE
Cache Engine 550 · Cisco
2.2.0; 2.4.0; 3.0 · source: NVD
CE
Cache Engine 570 · Cisco
2.2.0; 2.4.0; 3.0; 570 · source: NVD
CD
Content Distribution Manager 4630 · Cisco
4.0; 4.1 · source: NVD
CD
Content Distribution Manager 4650 · Cisco
4.0; 4.1 · source: NVD
CE
Content Engine · Cisco
507; 507_2.2.0; 507_3.1; 507_4.0; 507_4.1; 560; +14 more · source: NVD
CR
Content Router 4430 · Cisco
All versions, or not specified · source: NVD
EC
Enterprise Content Delivery Network Software · Cisco
4.0; 4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0778
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0778
Vendor Advisory
http://www.cisco.com/warp/public/707/transparentcache-tcp-relay-vuln-pub.shtml
Vendor Advisory
http://www.iss.net/security_center/static/9082.php
Patch
http://www.securityfocus.com/bid/4751