← Back

CVE-2001-0537

Published: Jul 21, 2001Modified: Apr 16, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.

Affected (91)

Products: Cisco: Ios
1 product
Ios
Configuration A
91 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Version 11.3
Version 11.3aa
Version 11.3da
Version 11.3db
Version 11.3ha
Version 11.3ma
Version 11.3na
Version 11.3t
Version 11.3xa
Version 12.0
Version 12.0(10)w5(18g)
Version 12.0(14)w5(20)
Version 12.0(5)xk
Version 12.0(7)xk
Version 12.0da
Version 12.0db
Version 12.0dc
Version 12.0s
Version 12.0sc
Version 12.0sl
Version 12.0st
Version 12.0t
Version 12.0wc
Version 12.0wt
Version 12.0xa
Version 12.0xb
Version 12.0xc
Version 12.0xd
Version 12.0xe
Version 12.0xf
Version 12.0xg
Version 12.0xh
Version 12.0xi
Version 12.0xj
Version 12.0xl
Version 12.0xm
Version 12.0xn
Version 12.0xp
Version 12.0xq
Version 12.0xr
Version 12.0xs
Version 12.0xu
Version 12.0xv
Version 12.1
Version 12.1aa
Version 12.1cx
Version 12.1da
Version 12.1db
Version 12.1dc
Version 12.1e
Version 12.1ec
Version 12.1ex
Version 12.1ey
Version 12.1ez
Version 12.1t
Version 12.1xa
Version 12.1xb
Version 12.1xc
Version 12.1xd
Version 12.1xe
Version 12.1xf
Version 12.1xg
Version 12.1xh
Version 12.1xi
Version 12.1xj
Version 12.1xk
Version 12.1xl
Version 12.1xm
Version 12.1xp
Version 12.1xq
Version 12.1xr
Version 12.1xs
Version 12.1xt
Version 12.1xu
Version 12.1xv
Version 12.1xw
Version 12.1xx
Version 12.1xy
Version 12.1xz
Version 12.1ya
Version 12.1yb
Version 12.1yc
Version 12.1yd
Version 12.1yf
Version 12.2
Version 12.2t
Version 12.2xa
Version 12.2xd
Version 12.2xe
Version 12.2xh
Version 12.2xq

References (20)

Source: cve@mitre.org
ExploitPatchThird Party AdvisoryUS Government Resource
Source: cve@mitre.org
ExploitPatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
ExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.