{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T11:05:19Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20150318-CVE-2015-0667","slug":"cisco-sa-20150318-cve-2015-0667","vendor":"Cisco","title":"Cisco Content Services Switch (11500) Unauthenticated Port Forwarding Vulnerability","summary":"A vulnerability in the Management Interface of the Cisco Content Services Switch (11500) could allow an unauthenticated, remote attacker to gain unauthorized access to other devices on the network. The vulnerability is due to improper handling of SSH packets. An attacker could exploit this vulnerability by sending crafted packets to the Management Interface on the Cisco Content Services Switch (CSS). Cisco has confirmed the vulnerability; however, software updates are not available. To exploit this vulnerability, an attacker may need to acquire additional information, such as the IP address of the Management Interface on a targeted device in order to send crafted packets to the device. Cisco indicates through the CVSS score that proof-of-concept exploit code exists; however, the code is not known to be publicly available.","severity":"Medium","published_at":"2015-03-18T12:52:24Z","updated_at":"2015-03-18T12:52:24Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150318-CVE-2015-0667","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20150318-CVE-2015-0667/csaf/Cisco-SA-20150318-CVE-2015-0667.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":1,"public_evidence_count":1,"kev_count":0,"highest_epss":0.01631},"cves":[{"id":"CVE-2015-0667","kev":false,"epss":{"score":0.01631,"percentile":0.7359,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"}}],"public_evidence":[{"product":{"name":"Cisco Content Services Switch (CSS)","slug":"cisco-content-services-switch-css","vendor":"Cisco"},"cve":{"id":"CVE-2015-0667"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:55:01Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Content Services Switch (CSS)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01631,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2015-03-18T12:52:24Z","updated_at":"2015-03-18T12:52:24Z","advisory_updated_at":"2015-03-18T12:52:24Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150318-CVE-2015-0667","row_display_order":1}]}