Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2000-0266
http://www.securityfocus.com/bid/1122
http://www.cisco.com/warp/public/707/catos-enable-bypass-pub.shtml