CVE Feed

Dashboard / CVE / CVE-2001-0537

CVE-2001-0537

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.

Published:Jul 21, 2001

Last Modified:Apr 16, 2026

EPS:Mar 9, 2002

EPSS Score:0.93773

CVSS Score:9.3

Affected Products

Vendor

Product

Action

Vendor

Cisco

Product

Ios

Cisco

Ios

Exploits

http://www.cert.org/advisories/CA-2001-14.html http://www.cisco.com/warp/public/707/IOS-httplevel-pub.html http://www.securityfocus.com/bid/2936 http://www.cert.org/advisories/CA-2001-14.html http://www.cisco.com/warp/public/707/IOS-httplevel-pub.html http://www.securityfocus.com/bid/2936 https://www.exploit-db.com/exploits/20975 https://www.exploit-db.com/exploits/20976 https://www.exploit-db.com/exploits/20977 https://www.exploit-db.com/exploits/20978

Common Weakness Enumeration

CWE-287 Improper Authentication

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-114 Authentication Abuse

CAPEC-115 Authentication Bypass

CAPEC-151 Identity Spoofing

CAPEC-194 Fake the Source of Data

CAPEC-22 Exploiting Trust in Client

CAPEC-57 Utilizing REST's Trust in the System Resource to Obtain Sensitive Data

CAPEC-593 Session Hijacking

CAPEC-633 Token Impersonation

CAPEC-650 Upload a Web Shell to a Web Server

CAPEC-94 Adversary in the Middle (AiTM)

Related CVEs

CVE-2026-20301 (CVSS 8.6) — A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client pr…

CVE-2026-20125 (CVSS 7.7) — A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could al…

CVE-2026-20012 (CVSS 8.6) — A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Sof…

CVE-2025-20363 (CVSS 9) — A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco…

CVE-2025-20149 (CVSS 6.5) — A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local…

CVE-2025-20327 (CVSS 7.7) — A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low pri…

CVE-2025-20352 (CVSS 7.7) — A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS…

CVE-2025-20160 (CVSS 8.1) — A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software …

CVE-2025-20253 (CVSS 8.6) — A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and…

CVE-2025-20239 (CVSS 8.6) — A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software,…

References

http://www.cert.org/advisories/CA-2001-14.html

http://www.ciac.org/ciac/bulletins/l-106.shtml

http://www.cisco.com/warp/public/707/IOS-httplevel-pub.html

http://www.osvdb.org/578

http://www.securityfocus.com/archive/1/1601227034.20010702112207%40olympos.org

http://www.securityfocus.com/archive/1/20010703011650.60515.qmail%40web14910.mail.yahoo.com

http://www.securityfocus.com/archive/1/4.3.2.7.2.20010629095801.0c3e6a70%40brussels.cisco.com

http://www.securityfocus.com/archive/1/Pine.LNX.3.96.1010702134611.22995B-100000%40Lib-Vai.lib.asu.edu

http://www.securityfocus.com/bid/2936

https://exchange.xforce.ibmcloud.com/vulnerabilities/6749

http://www.cert.org/advisories/CA-2001-14.html

http://www.ciac.org/ciac/bulletins/l-106.shtml

http://www.cisco.com/warp/public/707/IOS-httplevel-pub.html

http://www.osvdb.org/578

http://www.securityfocus.com/archive/1/1601227034.20010702112207%40olympos.org

http://www.securityfocus.com/archive/1/20010703011650.60515.qmail%40web14910.mail.yahoo.com

http://www.securityfocus.com/archive/1/4.3.2.7.2.20010629095801.0c3e6a70%40brussels.cisco.com

http://www.securityfocus.com/archive/1/Pine.LNX.3.96.1010702134611.22995B-100000%40Lib-Vai.lib.asu.edu

http://www.securityfocus.com/bid/2936

https://exchange.xforce.ibmcloud.com/vulnerabilities/6749

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High