CVE-2001-0537

Cisco IOS 11.x/12.x - HTTP Configuration Arbitrary Administrative Access

Severity Score

9.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.

*Credits: N/A

CVSS Scores

NISTv2 9.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2001-03-07 First Exploit
2001-06-28 CVE Reserved
2001-07-21 CVE Published
2024-08-08 CVE Updated
2024-08-13 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-287: Improper Authentication

CAPEC

References (14)

URL	Tag	Source
http://www.ciac.org/ciac/bulletins/l-106.shtml	Government Resource
http://www.osvdb.org/578	Vdb Entry
http://www.securityfocus.com/archive/1/1601227034.20010702112207%40olympos.org	Mailing List
http://www.securityfocus.com/archive/1/20010703011650.60515.qmail%40web14910.mail.yahoo.com	Mailing List
http://www.securityfocus.com/archive/1/4.3.2.7.2.20010629095801.0c3e6a70%40brussels.cisco.com	Mailing List
http://www.securityfocus.com/archive/1/Pine.LNX.3.96.1010702134611.22995B-100000%40Lib-Vai.lib.asu.edu	Mailing List
https://exchange.xforce.ibmcloud.com/vulnerabilities/6749	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/20975	2001-06-27
https://www.exploit-db.com/exploits/20976	2001-06-27
https://www.exploit-db.com/exploits/20977	2001-03-07
https://www.exploit-db.com/exploits/20978	2001-06-27
http://www.cert.org/advisories/CA-2001-14.html	2024-08-08
http://www.cisco.com/warp/public/707/IOS-httplevel-pub.html	2024-08-08
http://www.securityfocus.com/bid/2936	2024-08-08

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				11.3 Search vendor "Cisco" for product "Ios" and version "11.3"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				11.3aa Search vendor "Cisco" for product "Ios" and version "11.3aa"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				11.3da Search vendor "Cisco" for product "Ios" and version "11.3da"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				11.3db Search vendor "Cisco" for product "Ios" and version "11.3db"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				11.3ha Search vendor "Cisco" for product "Ios" and version "11.3ha"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				11.3ma Search vendor "Cisco" for product "Ios" and version "11.3ma"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				11.3na Search vendor "Cisco" for product "Ios" and version "11.3na"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				11.3t Search vendor "Cisco" for product "Ios" and version "11.3t"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				11.3xa Search vendor "Cisco" for product "Ios" and version "11.3xa"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0 Search vendor "Cisco" for product "Ios" and version "12.0"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0\(5\)xk Search vendor "Cisco" for product "Ios" and version "12.0\(5\)xk"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0\(7\)xk Search vendor "Cisco" for product "Ios" and version "12.0\(7\)xk"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0\(10\)w5\(18g\) Search vendor "Cisco" for product "Ios" and version "12.0\(10\)w5\(18g\)"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0\(14\)w5\(20\) Search vendor "Cisco" for product "Ios" and version "12.0\(14\)w5\(20\)"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0da Search vendor "Cisco" for product "Ios" and version "12.0da"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0db Search vendor "Cisco" for product "Ios" and version "12.0db"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0dc Search vendor "Cisco" for product "Ios" and version "12.0dc"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0s Search vendor "Cisco" for product "Ios" and version "12.0s"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0sc Search vendor "Cisco" for product "Ios" and version "12.0sc"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0sl Search vendor "Cisco" for product "Ios" and version "12.0sl"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0st Search vendor "Cisco" for product "Ios" and version "12.0st"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0t Search vendor "Cisco" for product "Ios" and version "12.0t"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0wc Search vendor "Cisco" for product "Ios" and version "12.0wc"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0wt Search vendor "Cisco" for product "Ios" and version "12.0wt"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0xa Search vendor "Cisco" for product "Ios" and version "12.0xa"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0xb Search vendor "Cisco" for product "Ios" and version "12.0xb"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0xc Search vendor "Cisco" for product "Ios" and version "12.0xc"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0xd Search vendor "Cisco" for product "Ios" and version "12.0xd"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0xe Search vendor "Cisco" for product "Ios" and version "12.0xe"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0xf Search vendor "Cisco" for product "Ios" and version "12.0xf"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0xg Search vendor "Cisco" for product "Ios" and version "12.0xg"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0xh Search vendor "Cisco" for product "Ios" and version "12.0xh"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0xi Search vendor "Cisco" for product "Ios" and version "12.0xi"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0xj Search vendor "Cisco" for product "Ios" and version "12.0xj"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0xl Search vendor "Cisco" for product "Ios" and version "12.0xl"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0xm Search vendor "Cisco" for product "Ios" and version "12.0xm"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0xn Search vendor "Cisco" for product "Ios" and version "12.0xn"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0xp Search vendor "Cisco" for product "Ios" and version "12.0xp"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0xq Search vendor "Cisco" for product "Ios" and version "12.0xq"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0xr Search vendor "Cisco" for product "Ios" and version "12.0xr"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0xs Search vendor "Cisco" for product "Ios" and version "12.0xs"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0xu Search vendor "Cisco" for product "Ios" and version "12.0xu"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.0xv Search vendor "Cisco" for product "Ios" and version "12.0xv"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1 Search vendor "Cisco" for product "Ios" and version "12.1"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1aa Search vendor "Cisco" for product "Ios" and version "12.1aa"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1cx Search vendor "Cisco" for product "Ios" and version "12.1cx"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1da Search vendor "Cisco" for product "Ios" and version "12.1da"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1db Search vendor "Cisco" for product "Ios" and version "12.1db"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1dc Search vendor "Cisco" for product "Ios" and version "12.1dc"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1e Search vendor "Cisco" for product "Ios" and version "12.1e"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1ec Search vendor "Cisco" for product "Ios" and version "12.1ec"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1ex Search vendor "Cisco" for product "Ios" and version "12.1ex"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1ey Search vendor "Cisco" for product "Ios" and version "12.1ey"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1ez Search vendor "Cisco" for product "Ios" and version "12.1ez"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1t Search vendor "Cisco" for product "Ios" and version "12.1t"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xa Search vendor "Cisco" for product "Ios" and version "12.1xa"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xb Search vendor "Cisco" for product "Ios" and version "12.1xb"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xc Search vendor "Cisco" for product "Ios" and version "12.1xc"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xd Search vendor "Cisco" for product "Ios" and version "12.1xd"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xe Search vendor "Cisco" for product "Ios" and version "12.1xe"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xf Search vendor "Cisco" for product "Ios" and version "12.1xf"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xg Search vendor "Cisco" for product "Ios" and version "12.1xg"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xh Search vendor "Cisco" for product "Ios" and version "12.1xh"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xi Search vendor "Cisco" for product "Ios" and version "12.1xi"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xj Search vendor "Cisco" for product "Ios" and version "12.1xj"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xk Search vendor "Cisco" for product "Ios" and version "12.1xk"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xl Search vendor "Cisco" for product "Ios" and version "12.1xl"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xm Search vendor "Cisco" for product "Ios" and version "12.1xm"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xp Search vendor "Cisco" for product "Ios" and version "12.1xp"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xq Search vendor "Cisco" for product "Ios" and version "12.1xq"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xr Search vendor "Cisco" for product "Ios" and version "12.1xr"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xs Search vendor "Cisco" for product "Ios" and version "12.1xs"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xt Search vendor "Cisco" for product "Ios" and version "12.1xt"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xu Search vendor "Cisco" for product "Ios" and version "12.1xu"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xv Search vendor "Cisco" for product "Ios" and version "12.1xv"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xw Search vendor "Cisco" for product "Ios" and version "12.1xw"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xx Search vendor "Cisco" for product "Ios" and version "12.1xx"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xy Search vendor "Cisco" for product "Ios" and version "12.1xy"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1xz Search vendor "Cisco" for product "Ios" and version "12.1xz"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1ya Search vendor "Cisco" for product "Ios" and version "12.1ya"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1yb Search vendor "Cisco" for product "Ios" and version "12.1yb"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1yc Search vendor "Cisco" for product "Ios" and version "12.1yc"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1yd Search vendor "Cisco" for product "Ios" and version "12.1yd"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.1yf Search vendor "Cisco" for product "Ios" and version "12.1yf"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.2 Search vendor "Cisco" for product "Ios" and version "12.2"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.2t Search vendor "Cisco" for product "Ios" and version "12.2t"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.2xa Search vendor "Cisco" for product "Ios" and version "12.2xa"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.2xd Search vendor "Cisco" for product "Ios" and version "12.2xd"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.2xe Search vendor "Cisco" for product "Ios" and version "12.2xe"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.2xh Search vendor "Cisco" for product "Ios" and version "12.2xh"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.2xq Search vendor "Cisco" for product "Ios" and version "12.2xq"		-		Affected