CVEvulnerability
CVE-2001-0537
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-07-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.
Affected configurations
• cisco ios 11.3
• cisco ios 11.3aa
• cisco ios 11.3da
• cisco ios 11.3db
• cisco ios 11.3ha
• cisco ios 11.3ma
• cisco ios 11.3na
• cisco ios 11.3t
• cisco ios 11.3xa
• cisco ios 12.0
• cisco ios 12.0\(5\)xk
• cisco ios 12.0\(7\)xk
• cisco ios 12.0\(10\)w5\(18g\)
• cisco ios 12.0\(14\)w5\(20\)
• cisco ios 12.0da
• cisco ios 12.0db
• cisco ios 12.0dc
• cisco ios 12.0s
• cisco ios 12.0sc
• cisco ios 12.0sl
• cisco ios 12.0st
• cisco ios 12.0t
• cisco ios 12.0wc
• cisco ios 12.0wt
• cisco ios 12.0xa
• cisco ios 12.0xb
• cisco ios 12.0xc
• cisco ios 12.0xd
• cisco ios 12.0xe
• cisco ios 12.0xf
• cisco ios 12.0xg
• cisco ios 12.0xh
• cisco ios 12.0xi
• cisco ios 12.0xj
• cisco ios 12.0xl
• cisco ios 12.0xm
• cisco ios 12.0xn
• cisco ios 12.0xp
• cisco ios 12.0xq
• cisco ios 12.0xr
• cisco ios 12.0xs
• cisco ios 12.0xu
• cisco ios 12.0xv
• cisco ios 12.1
• cisco ios 12.1aa
• cisco ios 12.1cx
• cisco ios 12.1da
• cisco ios 12.1db
• cisco ios 12.1dc
• cisco ios 12.1e
• cisco ios 12.1ec
• cisco ios 12.1ex
• cisco ios 12.1ey
• cisco ios 12.1ez
• cisco ios 12.1t
• cisco ios 12.1xa
• cisco ios 12.1xb
• cisco ios 12.1xc
• cisco ios 12.1xd
• cisco ios 12.1xe
… and 31 more
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://www.cert.org/advisories/CA-2001-14.html Exploit, Patch, Third Party Advisory, US Government Resource
- http://www.ciac.org/ciac/bulletins/l-106.shtml www.ciac.org
- http://www.cisco.com/warp/public/707/IOS-httplevel-pub.html Exploit, Patch, Vendor Advisory
- http://www.osvdb.org/578 www.osvdb.org
- http://www.securityfocus.com/archive/1/1601227034.20010702112207%40olympos.org www.securityfocus.com
- http://www.securityfocus.com/archive/1/20010703011650.60515.qmail%40web14910.mail.yahoo.com www.securityfocus.com
- http://www.securityfocus.com/archive/1/4.3.2.7.2.20010629095801.0c3e6a70%40brussels.cisco.com www.securityfocus.com
- http://www.securityfocus.com/archive/1/Pine.LNX.3.96.1010702134611.22995B-100000%40Lib-Vai.lib.asu.edu www.securityfocus.com
- http://www.securityfocus.com/bid/2936 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6749 exchange.xforce.ibmcloud.com
- http://www.cert.org/advisories/CA-2001-14.html Exploit, Patch, Third Party Advisory, US Government Resource
- http://www.ciac.org/ciac/bulletins/l-106.shtml www.ciac.org
- http://www.cisco.com/warp/public/707/IOS-httplevel-pub.html Exploit, Patch, Vendor Advisory
- http://www.osvdb.org/578 www.osvdb.org
- http://www.securityfocus.com/archive/1/1601227034.20010702112207%40olympos.org www.securityfocus.com
- http://www.securityfocus.com/archive/1/20010703011650.60515.qmail%40web14910.mail.yahoo.com www.securityfocus.com
- http://www.securityfocus.com/archive/1/4.3.2.7.2.20010629095801.0c3e6a70%40brussels.cisco.com www.securityfocus.com
- http://www.securityfocus.com/archive/1/Pine.LNX.3.96.1010702134611.22995B-100000%40Lib-Vai.lib.asu.edu www.securityfocus.com
- http://www.securityfocus.com/bid/2936 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6749 exchange.xforce.ibmcloud.com