VulnerabilityModified
CVE-2006-2322
The transparent proxy feature of the Cisco Application Velocity System (AVS) 3110 5.0 and 4.0 and earlier, and 3120 5.0.0 and earlier, has a default configuration that allows remote attackers to proxy arbitrary TCP connections, aka Bug ID CSCsd32143.
MEDIUM 6.4EPSS 1.54%
Does this matter?
Lower severity and a low EPSS score (1.54%). Track it; it rarely justifies an emergency change on its own.
Description
The transparent proxy feature of the Cisco Application Velocity System (AVS) 3110 5.0 and 4.0 and earlier, and 3120 5.0.0 and earlier, has a default configuration that allows remote attackers to proxy arbitrary TCP connections, aka Bug ID CSCsd32143.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 1.54% probability · 73th percentile
- CISA KEV
- Not listed
- Affected
- cisco/application velocity system 3110 · cisco/application velocity system 3120
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/20079
- http://securitytracker.com/id?1016056
- http://www.cisco.com/warp/public/707/cisco-sa-20060510-avs.shtmlPatch, Vendor Advisory
- http://www.osvdb.org/25459
- http://www.securityfocus.com/bid/17937
- http://www.vupen.com/english/advisories/2006/1762
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26351
- http://secunia.com/advisories/20079
- http://securitytracker.com/id?1016056
- http://www.cisco.com/warp/public/707/cisco-sa-20060510-avs.shtmlPatch, Vendor Advisory
- http://www.osvdb.org/25459
- http://www.securityfocus.com/bid/17937
- http://www.vupen.com/english/advisories/2006/1762
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26351
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.