## Description

Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect HTTP traffic to arbitrary hosts via WCCP packets to UDP port 2048.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### cisco - ios

Affected Versions:

- *

## References

- http://www.ciac.org/ciac/bulletins/i-054.shtml
  Patch Vendor Advisory
- http://www.cisco.com/warp/public/770/wccpauth-pub.shtml
  Patch Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/1577
- http://www.ciac.org/ciac/bulletins/i-054.shtml
  Patch Vendor Advisory
- http://www.cisco.com/warp/public/770/wccpauth-pub.shtml
  Patch Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/1577

Neural Processor Active