Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2001-0537
HistoryMar 09, 2002 - 5:00 a.m.

CVE-2001-0537

2002-03-0905:00:00
CWE-287
[email protected]
web.nvd.nist.gov
91
2
cisco
ios
http server
vulnerability
authentication bypass
arbitrary command execution

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.877 High

EPSS

Percentile

98.7%

JSON

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.

Affected configurations

NVD
Node
ciscoiosMatch11.3
OR
ciscoiosMatch11.3aa
OR
ciscoiosMatch11.3da
OR
ciscoiosMatch11.3db
OR
ciscoiosMatch11.3ha
OR
ciscoiosMatch11.3ma
OR
ciscoiosMatch11.3na
OR
ciscoiosMatch11.3t
OR
ciscoiosMatch11.3xa
OR
ciscoiosMatch12.0
OR
ciscoiosMatch12.0\(5\)xk
OR
ciscoiosMatch12.0\(7\)xk
OR
ciscoiosMatch12.0\(10\)w5\(18g\)
OR
ciscoiosMatch12.0\(14\)w5\(20\)
OR
ciscoiosMatch12.0da
OR
ciscoiosMatch12.0db
OR
ciscoiosMatch12.0dc
OR
ciscoiosMatch12.0s
OR
ciscoiosMatch12.0sc
OR
ciscoiosMatch12.0sl
OR
ciscoiosMatch12.0st
OR
ciscoiosMatch12.0t
OR
ciscoiosMatch12.0wc
OR
ciscoiosMatch12.0wt
OR
ciscoiosMatch12.0xa
OR
ciscoiosMatch12.0xb
OR
ciscoiosMatch12.0xc
OR
ciscoiosMatch12.0xd
OR
ciscoiosMatch12.0xe
OR
ciscoiosMatch12.0xf
OR
ciscoiosMatch12.0xg
OR
ciscoiosMatch12.0xh
OR
ciscoiosMatch12.0xi
OR
ciscoiosMatch12.0xj
OR
ciscoiosMatch12.0xl
OR
ciscoiosMatch12.0xm
OR
ciscoiosMatch12.0xn
OR
ciscoiosMatch12.0xp
OR
ciscoiosMatch12.0xq
OR
ciscoiosMatch12.0xr
OR
ciscoiosMatch12.0xs
OR
ciscoiosMatch12.0xu
OR
ciscoiosMatch12.0xv
OR
ciscoiosMatch12.1
OR
ciscoiosMatch12.1aa
OR
ciscoiosMatch12.1cx
OR
ciscoiosMatch12.1da
OR
ciscoiosMatch12.1db
OR
ciscoiosMatch12.1dc
OR
ciscoiosMatch12.1e
OR
ciscoiosMatch12.1ec
OR
ciscoiosMatch12.1ex
OR
ciscoiosMatch12.1ey
OR
ciscoiosMatch12.1ez
OR
ciscoiosMatch12.1t
OR
ciscoiosMatch12.1xa
OR
ciscoiosMatch12.1xb
OR
ciscoiosMatch12.1xc
OR
ciscoiosMatch12.1xd
OR
ciscoiosMatch12.1xe
OR
ciscoiosMatch12.1xf
OR
ciscoiosMatch12.1xg
OR
ciscoiosMatch12.1xh
OR
ciscoiosMatch12.1xi
OR
ciscoiosMatch12.1xj
OR
ciscoiosMatch12.1xk
OR
ciscoiosMatch12.1xl
OR
ciscoiosMatch12.1xm
OR
ciscoiosMatch12.1xp
OR
ciscoiosMatch12.1xq
OR
ciscoiosMatch12.1xr
OR
ciscoiosMatch12.1xs
OR
ciscoiosMatch12.1xt
OR
ciscoiosMatch12.1xu
OR
ciscoiosMatch12.1xv
OR
ciscoiosMatch12.1xw
OR
ciscoiosMatch12.1xx
OR
ciscoiosMatch12.1xy
OR
ciscoiosMatch12.1xz
OR
ciscoiosMatch12.1ya
OR
ciscoiosMatch12.1yb
OR
ciscoiosMatch12.1yc
OR
ciscoiosMatch12.1yd
OR
ciscoiosMatch12.1yf
OR
ciscoiosMatch12.2
OR
ciscoiosMatch12.2t
OR
ciscoiosMatch12.2xa
OR
ciscoiosMatch12.2xd
OR
ciscoiosMatch12.2xe
OR
ciscoiosMatch12.2xh
OR
ciscoiosMatch12.2xq

Social References

More

Related

saint 4
nessus 2
cert 1
cisco 1
nvd 1
checkpoint_advisories 1
nuclei 1
cvelist 1
saint
saint
Cisco IOS HTTP access level authentication bypass
2010-12-23 00:00:00
Cisco IOS HTTP access level authentication bypass
2010-12-23 00:00:00
Cisco IOS HTTP access level authentication bypass
2010-12-23 00:00:00
nessus
nessus
IOS HTTP Authorization Vulnerability - Cisco Systems
2010-09-01 00:00:00
Cisco IOS HTTP Configuration Unauthorized Administrative Access
2001-07-02 00:00:00
cert
cert
Cisco IOS HTTP server authentication vulnerability allows remote attackers to execute arbitrary commands
2001-06-27 00:00:00
cisco
cisco
IOS HTTP Authorization Vulnerability
2001-06-27 15:00:00
nvd
nvd
CVE-2001-0537
2001-07-21 04:00:00
checkpoint_advisories
checkpoint_advisories
Cisco IOS HTTP Authentication Bypass - Ver2 (CVE-2001-0537)
2014-03-03 00:00:00
nuclei
nuclei
Cisco IOS HTTP Configuration - Authentication Bypass
2023-06-12 12:36:50
cvelist
cvelist
CVE-2001-0537
2002-03-09 05:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.877 High

EPSS

Percentile

98.7%

JSON
Related for CVE-2001-0537
saint4nessus2cert1cisco1nvd1checkpoint_advisories1nuclei1cvelist1