CVE-2001-0537
NoneCVSS
—
EPSS
68.5%
Published
Jul 21, 2001
CISA due date
—
The record
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-56850 A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions… CWE-287
- CVE-2026-50365 Improper authentication in Windows RPC API allows an unauthorized attacker to elevate… CWE-287
- CVE-2026-55689 OpenFGA is an authorization/permission engine built for developers. CWE-287
- CVE-2026-49869 Kestra is an open-source, event-driven orchestration platform. CWE-287
- CVE-2026-55962 TLS 1.3 post-handshake authentication (PHA) issue where a server could accept a client's… CWE-287
- CVE-2026-11703 Missing SNI/ALPN binding on stateful (session-ID) resumption, which previously skipped… CWE-287
- CVE-2026-54089 File Browser is a file managing interface for uploading, deleting, previewing, renaming… CWE-287
- CVE-2026-55759 Rocket.Chat is an open-source, secure, fully customizable communications platform. CWE-287