← All CVEs

CVE-2000-0380

high · 7.1

The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.

7.1
CVSS
35.0%
EPSS (exploit prob.)
98th
EPSS percentile
2000-04-26
Published

AV:N/AC:M/Au:N/C:N/I:N/A:C

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
ciscoios11.1
ciscoios11.2
ciscoios11.2(4)f1
ciscoios11.2(8)
ciscoios11.2(8)p
ciscoios11.2(9)p
ciscoios11.2(9)xa
ciscoios11.2(10)
ciscoios11.2(10)bc
ciscoios11.2(17)
ciscoios11.2p
ciscoios11.3
ciscoios11.3(1)
ciscoios11.3(1)ed
ciscoios11.3(1)t
ciscoios11.3t
ciscoios12.0
ciscoios12.0(1)w
ciscoios12.0(1)xa3
ciscoios12.0(1)xb
ciscoios12.0(1)xe
ciscoios12.0(2)
ciscoios12.0(2)xc
ciscoios12.0(2)xd
ciscoios12.0(2)xf
ciscoios12.0(2)xg
ciscoios12.0(3)t2
ciscoios12.0(4)
ciscoios12.0(4)s
ciscoios12.0(4)t
ciscoios12.0(5)
ciscoios12.0(5)t1
ciscoios12.0(6)
ciscoios12.0(7)t
ciscoios12.0(8)
ciscoios12.0(9)s
ciscoios12.0db
ciscoios12.0s
ciscoios12.0t

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2000-0380