NetSight
IP …
critical9.3Public exploit code

CVE-2001-0537

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by spe…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.

Affected products

VendorProductAffected versions
CiscoIos
Versions 11.3, 11.3aa, 11.3da, 11.3db, 11.3ha, 11.3ma

Weakness classification

CWE-287

References