9.3

CVE-2001-0537

Exploit
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Version11.3
Cisco ≫ Ios Version11.3aa
Cisco ≫ Ios Version11.3da
Cisco ≫ Ios Version11.3db
Cisco ≫ Ios Version11.3ha
Cisco ≫ Ios Version11.3ma
Cisco ≫ Ios Version11.3na
Cisco ≫ Ios Version11.3t
Cisco ≫ Ios Version11.3xa
Cisco ≫ Ios Version12.0
Cisco ≫ Ios Version12.0da
Cisco ≫ Ios Version12.0db
Cisco ≫ Ios Version12.0dc
Cisco ≫ Ios Version12.0s
Cisco ≫ Ios Version12.0sc
Cisco ≫ Ios Version12.0sl
Cisco ≫ Ios Version12.0st
Cisco ≫ Ios Version12.0t
Cisco ≫ Ios Version12.0wc
Cisco ≫ Ios Version12.0wt
Cisco ≫ Ios Version12.0xa
Cisco ≫ Ios Version12.0xb
Cisco ≫ Ios Version12.0xc
Cisco ≫ Ios Version12.0xd
Cisco ≫ Ios Version12.0xe
Cisco ≫ Ios Version12.0xf
Cisco ≫ Ios Version12.0xg
Cisco ≫ Ios Version12.0xh
Cisco ≫ Ios Version12.0xi
Cisco ≫ Ios Version12.0xj
Cisco ≫ Ios Version12.0xl
Cisco ≫ Ios Version12.0xm
Cisco ≫ Ios Version12.0xn
Cisco ≫ Ios Version12.0xp
Cisco ≫ Ios Version12.0xq
Cisco ≫ Ios Version12.0xr
Cisco ≫ Ios Version12.0xs
Cisco ≫ Ios Version12.0xu
Cisco ≫ Ios Version12.0xv
Cisco ≫ Ios Version12.1
Cisco ≫ Ios Version12.1aa
Cisco ≫ Ios Version12.1cx
Cisco ≫ Ios Version12.1da
Cisco ≫ Ios Version12.1db
Cisco ≫ Ios Version12.1dc
Cisco ≫ Ios Version12.1e
Cisco ≫ Ios Version12.1ec
Cisco ≫ Ios Version12.1ex
Cisco ≫ Ios Version12.1ey
Cisco ≫ Ios Version12.1ez
Cisco ≫ Ios Version12.1t
Cisco ≫ Ios Version12.1xa
Cisco ≫ Ios Version12.1xb
Cisco ≫ Ios Version12.1xc
Cisco ≫ Ios Version12.1xd
Cisco ≫ Ios Version12.1xe
Cisco ≫ Ios Version12.1xf
Cisco ≫ Ios Version12.1xg
Cisco ≫ Ios Version12.1xh
Cisco ≫ Ios Version12.1xi
Cisco ≫ Ios Version12.1xj
Cisco ≫ Ios Version12.1xk
Cisco ≫ Ios Version12.1xl
Cisco ≫ Ios Version12.1xm
Cisco ≫ Ios Version12.1xp
Cisco ≫ Ios Version12.1xq
Cisco ≫ Ios Version12.1xr
Cisco ≫ Ios Version12.1xs
Cisco ≫ Ios Version12.1xt
Cisco ≫ Ios Version12.1xu
Cisco ≫ Ios Version12.1xv
Cisco ≫ Ios Version12.1xw
Cisco ≫ Ios Version12.1xx
Cisco ≫ Ios Version12.1xy
Cisco ≫ Ios Version12.1xz
Cisco ≫ Ios Version12.1ya
Cisco ≫ Ios Version12.1yb
Cisco ≫ Ios Version12.1yc
Cisco ≫ Ios Version12.1yd
Cisco ≫ Ios Version12.1yf
Cisco ≫ Ios Version12.2
Cisco ≫ Ios Version12.2t
Cisco ≫ Ios Version12.2xa
Cisco ≫ Ios Version12.2xd
Cisco ≫ Ios Version12.2xe
Cisco ≫ Ios Version12.2xh
Cisco ≫ Ios Version12.2xq
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 68.45% 0.992
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://www.cert.org/advisories/CA-2001-14.html
Patch
Third Party Advisory
US Government Resource
Exploit
http://www.ciac.org/ciac/bulletins/l-106.shtml
http://www.cisco.com/warp/public/707/IOS-httplevel-pub.html
Patch
Vendor Advisory
Exploit
http://www.osvdb.org/578
http://www.securityfocus.com/archive/1/1601227034.20010702112207%40olympos.org
http://www.securityfocus.com/archive/1/20010703011650.60515.qmail%40web14910.mail.yahoo.com
http://www.securityfocus.com/archive/1/4.3.2.7.2.20010629095801.0c3e6a70%40brussels.cisco.com
http://www.securityfocus.com/archive/1/Pine.LNX.3.96.1010702134611.22995B-100000%40Lib-Vai.lib.asu.edu
http://www.securityfocus.com/bid/2936
Patch
Vendor Advisory
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/6749