CVE-1999-1175: Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authent...

Security readout for executives and security teams

This old Cisco WCCP issue could let a remote attacker redirect web traffic by sending unauthenticated WCCP packets. Business risk depends on whether legacy Cisco Cache Engine or Cisco IOS 11.2 and earlier systems are still present and reachable. Exposure is most likely in legacy networks still running Cisco Cache Engine or Cisco IOS 11.2 and earlier with WCCP reachable over UDP 2048. Modern environments are less likely affected unless old infrastructure remains in service. Treat this as a legacy exposure review item. It is not KEV-listed, but affected reachable systems could create web traffic interception or redirection risk. Mitigation focus: Inventory Cisco Cache Engine and Cisco IOS 11.2 or earlier systems.; Review Cisco advisory for vendor-supported remediation or configuration guidance.; Restrict UDP 2048/WCCP reachability to trusted infrastructure only..

Prepared

Jul 11, 2026, 12:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.