← Database

CVE-2001-0537

CRITICAL CVSS: 9.3 Published: 2001-07-21 Modified: 2026-06-16

Description

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.

Affected Platforms

Cisco Ios

Weakness Type

CWE-287

References