CVE-2000-0945
Cisco Catalyst 3500 XL - Unauthenticated Remote Code Execution via /exec/ Directory
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2000-0945.
PoCs published by blackangels, hdm, including Metasploit module auxiliary/scanner/http/cisco_device_manager.
AI-analyzed exploit summary This Perl script exploits multiple vulnerabilities in Cisco devices, including DoS and arbitrary command execution. It targets specific Cisco IOS and Catalyst vulnerabilities by sending crafted HTTP or Telnet requests.
Description
The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory.
Exploits (2)
This Perl script exploits multiple vulnerabilities in Cisco devices, including DoS and arbitrary command execution. It targets specific Cisco IOS and Catalyst vulnerabilities by sending crafted HTTP or Telnet requests.
This Metasploit module scans Cisco devices with exposed HTTP device manager interfaces to gather configuration data. It authenticates using provided credentials and retrieves device information, including IOS configuration.