« Volver al listado

CVE-2002-0452

Estado: ModificadaAlta (7.5)—

Foundry Networks ServerIron switches do not decode URIs when applying "url-map" rules, which could make it easier for attackers to cause the switch to forward traffic to a different server than intended and exploit vulnerabilities that would otherwise be inaccessible.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Foundrynet — Serveriron

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2002-0452",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2002-08-12T04:00:00.000",
  "references": [
    {
      "url": "http://www.iss.net/security_center/static/8459.php",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/261834",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/4286",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.iss.net/security_center/static/8459.php",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/261834",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/4286",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Foundry Networks ServerIron switches do not decode URIs when applying \"url-map\" rules, which could make it easier for attackers to cause the switch to forward traffic to a different server than intended and exploit vulnerabilities that would otherwise be inaccessible."
    }
  ],
  "lastModified": "2026-06-16T21:57:28.393",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:foundrynet:serveriron:5.1.10t12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8F5240D4-EF05-4134-9B75-03C1BFE7D37D"
            },
            {
              "criteria": "cpe:2.3:a:foundrynet:serveriron:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E3BDF7B5-5962-4D37-965B-22022255C96B"
            },
            {
              "criteria": "cpe:2.3:a:foundrynet:serveriron:7.1.09:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F51A3647-C8B5-418F-B018-FCF24565DF2E"
            },
            {
              "criteria": "cpe:2.3:a:foundrynet:serveriron:400:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7324B907-DD45-46C2-B0AB-529F8F2722B1"
            },
            {
              "criteria": "cpe:2.3:a:foundrynet:serveriron:800:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C88F4D8C-7D21-4AA5-A102-942D05F9E3AD"
            },
            {
              "criteria": "cpe:2.3:a:foundrynet:serveriron:xl:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0A99990E-44C7-4331-B580-5E9AB74FF6DE"
            },
            {
              "criteria": "cpe:2.3:a:foundrynet:serveriron:xl_g:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B002AEB7-4680-4D15-AB64-8A368FF80F33"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}