Detections
Analytics
IOS HTTP Authorization Vulnerability - Cisco Systems
high Nessus Plugin ID 48956
Language:
Synopsis
The remote device is missing a vendor-supplied security patch.Description
When the HTTP server is enabled and local authorization is used, it is possible, under some circumstances, to bypass the authentication and execute any command on the device. In that case, the user will be able to exercise complete control over the device. All commands will be executed with the highest privilege (level 15). All releases of Cisco IOS software, starting with release 11.3 and later, are vulnerable. Virtually all mainstream Cisco routers and switches running Cisco IOS software are affected by this vulnerability.Products that are not running Cisco IOS software are not vulnerable. The workaround for this vulnerability is to disable HTTP server on the router or to use Terminal Access Controller Access Control System (TACACS+) or Radius for authentication.
Solution
Apply the relevant patch referenced in Cisco Security Advisory cisco-sa-20010627-ios-http-level.See Also
Plugin Details
Severity: High
ID: 48956
File Name: cisco-sa-20010627-ios-http-levelhttp.nasl
Version: 1.17
Type: local
Family: CISCO
Published: 9/1/2010
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/o:cisco:ios
Required KB Items: Host/Cisco/IOS/Version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 6/27/2001
Vulnerability Publication Date: 6/27/2001
Reference Information
CVE: CVE-2001-0537
BID: 2936