CVE-2006-3595

The CVE refers to Cisco Router Web Setup (CRWS) with the IOS HTTP server, affected in versions prior to 3.3.0 build 31. The issue is that the default configuration does not require credentials, allowing remote attackers to access the server with arbitrary privilege levels (bug CSCsa78190). Connec...

Cisco Router Web Setup (CRWS) contains an insecure default IOS configuration

Overview A vulnerability in the Cisco Router Web Setup CRWS web configuration tool on some Cisco 800 and SOHO series routers may allow remote execution of system-level commands with no authentication. Description Cisco Router Web Setup Tool The Cisco Router Web Setup tool, or CRWS, provides a GUI...