VulnerabilityModified
CVE-2001-0537
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.
HIGH 9.3EPSS 68.5%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 68.5%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 68.45% probability · 99th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- cisco/ios
- Source
- cve@mitre.org
References
- http://www.cert.org/advisories/CA-2001-14.htmlExploit, Patch, Third Party Advisory, US Government Resource
- http://www.ciac.org/ciac/bulletins/l-106.shtml
- http://www.cisco.com/warp/public/707/IOS-httplevel-pub.htmlExploit, Patch, Vendor Advisory
- http://www.osvdb.org/578
- http://www.securityfocus.com/archive/1/1601227034.20010702112207%40olympos.org
- http://www.securityfocus.com/archive/1/20010703011650.60515.qmail%40web14910.mail.yahoo.com
- http://www.securityfocus.com/archive/1/4.3.2.7.2.20010629095801.0c3e6a70%40brussels.cisco.com
- http://www.securityfocus.com/archive/1/Pine.LNX.3.96.1010702134611.22995B-100000%40Lib-Vai.lib.asu.edu
- http://www.securityfocus.com/bid/2936Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6749
- http://www.cert.org/advisories/CA-2001-14.htmlExploit, Patch, Third Party Advisory, US Government Resource
- http://www.ciac.org/ciac/bulletins/l-106.shtml
- http://www.cisco.com/warp/public/707/IOS-httplevel-pub.htmlExploit, Patch, Vendor Advisory
- http://www.osvdb.org/578
- http://www.securityfocus.com/archive/1/1601227034.20010702112207%40olympos.org
- http://www.securityfocus.com/archive/1/20010703011650.60515.qmail%40web14910.mail.yahoo.com
- http://www.securityfocus.com/archive/1/4.3.2.7.2.20010629095801.0c3e6a70%40brussels.cisco.com
- http://www.securityfocus.com/archive/1/Pine.LNX.3.96.1010702134611.22995B-100000%40Lib-Vai.lib.asu.edu
- http://www.securityfocus.com/bid/2936Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6749
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.