CVE-2001-0537
EXPLOITED NUCLEICisco IOS 11.3-12.2 - Unauthenticated Command Execution via High Access Level URL
Title source: llmExploitation Summary
CVE-2001-0537 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 6 public exploits from researchers including blackangels, Eliel C. Sardanons, cronos, including a Metasploit module auxiliary/scanner/http/cisco_ios_auth_bypass.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Perl script exploits multiple Cisco IOS vulnerabilities, including CVE-2001-0537, by sending crafted HTTP requests to gain unauthorized administrative access or cause denial of service. It targets Cisco routers and switches with various exploits, including authentication bypass and buffer overflows.
Description
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.
Exploits (6)
This Perl script exploits multiple Cisco IOS vulnerabilities, including CVE-2001-0537, by sending crafted HTTP requests to gain unauthorized administrative access or cause denial of service. It targets Cisco routers and switches with various exploits, including authentication bypass and buffer overflows.
This exploit leverages an authentication bypass vulnerability in Cisco IOS by sending crafted HTTP requests to the '/level/16/exec/' endpoint, allowing remote command execution with administrative privileges. The code establishes a socket connection to the target device and sends user-provided commands via HTTP GET requests.
This Perl script checks for the Cisco IOS HTTP authentication bypass vulnerability (CVE-2001-0537) by iterating through privilege levels 16-99 and testing for unauthorized access. It sends HTTP requests to the target device and analyzes responses to determine vulnerability.
This Perl script scans a range of IP addresses for the Cisco IOS HTTP Configuration Arbitrary Administrative Access Vulnerability (CVE-2001-0537). It attempts to exploit the vulnerability by sending HTTP requests to the target devices and checks for a successful response indicating administrative access.
This repository contains the RouterSploit framework, an exploitation toolkit for embedded devices. It includes modules for exploits, credential testing, scanners, and payloads, with a focus on router and IoT device vulnerabilities.
This Metasploit module exploits an authentication bypass vulnerability in Cisco IOS HTTP Server by sending a crafted GET request to access privileged configuration data. It iterates through privilege levels 16-99 to find a vulnerable endpoint and retrieves the device configuration.
Nuclei Templates (1)
product:"Cisco IOS http config" && 200 || product:"cisco ios http config" || cpe:"cpe:2.3:o:cisco:ios"