9.3

CVE-2001-0537

Exploit

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.

Data is provided by the National Vulnerability Database (NVD)
Cisco ≫ Ios Version11.3
Cisco ≫ Ios Version11.3aa
Cisco ≫ Ios Version11.3da
Cisco ≫ Ios Version11.3db
Cisco ≫ Ios Version11.3ha
Cisco ≫ Ios Version11.3ma
Cisco ≫ Ios Version11.3na
Cisco ≫ Ios Version11.3t
Cisco ≫ Ios Version11.3xa
Cisco ≫ Ios Version12.0
Cisco ≫ Ios Version12.0da
Cisco ≫ Ios Version12.0db
Cisco ≫ Ios Version12.0dc
Cisco ≫ Ios Version12.0s
Cisco ≫ Ios Version12.0sc
Cisco ≫ Ios Version12.0sl
Cisco ≫ Ios Version12.0st
Cisco ≫ Ios Version12.0t
Cisco ≫ Ios Version12.0wc
Cisco ≫ Ios Version12.0wt
Cisco ≫ Ios Version12.0xa
Cisco ≫ Ios Version12.0xb
Cisco ≫ Ios Version12.0xc
Cisco ≫ Ios Version12.0xd
Cisco ≫ Ios Version12.0xe
Cisco ≫ Ios Version12.0xf
Cisco ≫ Ios Version12.0xg
Cisco ≫ Ios Version12.0xh
Cisco ≫ Ios Version12.0xi
Cisco ≫ Ios Version12.0xj
Cisco ≫ Ios Version12.0xl
Cisco ≫ Ios Version12.0xm
Cisco ≫ Ios Version12.0xn
Cisco ≫ Ios Version12.0xp
Cisco ≫ Ios Version12.0xq
Cisco ≫ Ios Version12.0xr
Cisco ≫ Ios Version12.0xs
Cisco ≫ Ios Version12.0xu
Cisco ≫ Ios Version12.0xv
Cisco ≫ Ios Version12.1
Cisco ≫ Ios Version12.1aa
Cisco ≫ Ios Version12.1cx
Cisco ≫ Ios Version12.1da
Cisco ≫ Ios Version12.1db
Cisco ≫ Ios Version12.1dc
Cisco ≫ Ios Version12.1e
Cisco ≫ Ios Version12.1ec
Cisco ≫ Ios Version12.1ex
Cisco ≫ Ios Version12.1ey
Cisco ≫ Ios Version12.1ez
Cisco ≫ Ios Version12.1t
Cisco ≫ Ios Version12.1xa
Cisco ≫ Ios Version12.1xb
Cisco ≫ Ios Version12.1xc
Cisco ≫ Ios Version12.1xd
Cisco ≫ Ios Version12.1xe
Cisco ≫ Ios Version12.1xf
Cisco ≫ Ios Version12.1xg
Cisco ≫ Ios Version12.1xh
Cisco ≫ Ios Version12.1xi
Cisco ≫ Ios Version12.1xj
Cisco ≫ Ios Version12.1xk
Cisco ≫ Ios Version12.1xl
Cisco ≫ Ios Version12.1xm
Cisco ≫ Ios Version12.1xp
Cisco ≫ Ios Version12.1xq
Cisco ≫ Ios Version12.1xr
Cisco ≫ Ios Version12.1xs
Cisco ≫ Ios Version12.1xt
Cisco ≫ Ios Version12.1xu
Cisco ≫ Ios Version12.1xv
Cisco ≫ Ios Version12.1xw
Cisco ≫ Ios Version12.1xx
Cisco ≫ Ios Version12.1xy
Cisco ≫ Ios Version12.1xz
Cisco ≫ Ios Version12.1ya
Cisco ≫ Ios Version12.1yb
Cisco ≫ Ios Version12.1yc
Cisco ≫ Ios Version12.1yd
Cisco ≫ Ios Version12.1yf
Cisco ≫ Ios Version12.2
Cisco ≫ Ios Version12.2t
Cisco ≫ Ios Version12.2xa
Cisco ≫ Ios Version12.2xd
Cisco ≫ Ios Version12.2xe
Cisco ≫ Ios Version12.2xh
Cisco ≫ Ios Version12.2xq
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 93.7% 0.998
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://www.cert.org/advisories/CA-2001-14.html
Patch
Third Party Advisory
US Government Resource
Exploit
http://www.securityfocus.com/bid/2936
Patch
Vendor Advisory
Exploit