CVE-2001-0537
N/A
Published: March 9, 2002 at 05:00 AM UTC
Updated: June 16, 2026 at 09:54 PM UTC
1 product affected across 1 vendorIOS
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 68%
Description
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
11.311.3aa11.3da11.3db11.3ha11.3ma11.3na11.3t11.3xa12.012.0(10)w5(18g)12.0(14)w5(20)12.0(5)xk12.0(7)xk12.0da12.0db12.0dc12.0s12.0sc12.0sl12.0st12.0t12.0wc12.0wt12.0xa12.0xb12.0xc12.0xd12.0xe12.0xf12.0xg12.0xh12.0xi12.0xj12.0xl12.0xm12.0xn12.0xp12.0xq12.0xr12.0xs12.0xu12.0xv12.112.1aa12.1cx12.1da12.1db12.1dc12.1e12.1ec12.1ex12.1ey12.1ez12.1t12.1xa12.1xb12.1xc12.1xd12.1xe12.1xf12.1xg12.1xh12.1xi12.1xj12.1xk12.1xl12.1xm12.1xp12.1xq12.1xr12.1xs12.1xt12.1xu12.1xv12.1xw12.1xx12.1xy12.1xz12.1ya12.1yb12.1yc12.1yd12.1yf12.212.2t12.2xa12.2xd12.2xe12.2xh12.2xq
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (10)
Third Party Advisoryx_refsource_CERTExploitPatchUS Government Resource
Source: [email protected]
http://www.cert.org/advisories/CA-2001-14.htmlThird Party AdvisoryUS Government Resourcex_refsource_CIAC
Source: [email protected]
http://www.ciac.org/ciac/bulletins/l-106.shtmlVendor Advisoryx_refsource_CISCOExploitPatch
Source: [email protected]
http://www.cisco.com/warp/public/707/IOS-httplevel-pub.htmlMailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://www.securityfocus.com/archive/1/1601227034.20010702112207%40olympos.orgMailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://www.securityfocus.com/archive/1/20010703011650.60515.qmail%40web14910.mail.yahoo.comMailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://www.securityfocus.com/archive/1/4.3.2.7.2.20010629095801.0c3e6a70%40brussels.cisco.comMailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://www.securityfocus.com/archive/1/Pine.LNX.3.96.1010702134611.22995B-100000%40Lib-Vai.lib.asu.eduQuick Info
StatusMODIFIED
CWE
CWE-287
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card