CVE-2001-0537

high · 9.3

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.

9.3

CVSS

68.5%

EPSS (exploit prob.)

99th

EPSS percentile

2001-07-21

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-287

Affected products

Vendor	Product	Affected versions
cisco	ios	11.3
cisco	ios	11.3aa
cisco	ios	11.3da
cisco	ios	11.3db
cisco	ios	11.3ha
cisco	ios	11.3ma
cisco	ios	11.3na
cisco	ios	11.3t
cisco	ios	11.3xa
cisco	ios	12.0
cisco	ios	12.0(5)xk
cisco	ios	12.0(7)xk
cisco	ios	12.0(10)w5(18g)
cisco	ios	12.0(14)w5(20)
cisco	ios	12.0da
cisco	ios	12.0db
cisco	ios	12.0dc
cisco	ios	12.0s
cisco	ios	12.0sc
cisco	ios	12.0sl
cisco	ios	12.0st
cisco	ios	12.0t
cisco	ios	12.0wc
cisco	ios	12.0wt
cisco	ios	12.0xa
cisco	ios	12.0xb
cisco	ios	12.0xc
cisco	ios	12.0xd
cisco	ios	12.0xe
cisco	ios	12.0xf
cisco	ios	12.0xg
cisco	ios	12.0xh
cisco	ios	12.0xi
cisco	ios	12.0xj
cisco	ios	12.0xl
cisco	ios	12.0xm
cisco	ios	12.0xn
cisco	ios	12.0xp
cisco	ios	12.0xq
cisco	ios	12.0xr

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2001-0537